PowerShell 远程注册表操作、数据比较及事件日志查询指南
1. 远程注册表操作
1.1 获取远程注册表键的属性
PowerShell 本身不能直接访问和操作远程计算机的注册表，但可借助 .NET 框架实现。要获取给定远程注册表键的属性（或特定属性），可使用以下脚本：
param( $computer = $(throw "Please specify a computer name."), $path = $(throw "Please specify a registry path"), $property = "*" ) ## Validate and extract out the registry key if($path -match "^HKLM:\\(.*)") { $baseKey = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey( "LocalMachine", $computer) } elseif($path -match "^HKCU:\\(.*)") { $baseKey = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey( "CurrentUser", $computer) } else { Write-Error ("Please specify a fully-qualified registry path " + "(i.e.: HKLM:\Software) of the re
