Questions tagged [windows-registry]
The Windows Registry is a hierarchical database that stores configuration settings and options on Microsoft Windows operating systems. It contains settings for low-level operating system components as well as the applications running on the platform.
406
questions
0
votes
0
answers
26
views
After setting the windows 10 gpo "DenyUnspecified" and "DenyRemovableDevice", and configure AllowDeviceIDs device is visible but cannot be removed
I need to allow only specific usb media on my windows 10 Host (21h1).
The gpo configuration:
GPO_LocalMachineRegistryKeySet "Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions&...
1
vote
0
answers
26
views
Problems with FIPS Mode in Adobe Acrobat Pro 2020 and Adobe Reader DC
Security requirements are such that we need to set this key depending on software:
HKCU\Software\Adobe\Adobe Acrobat\2020\AVGeneral\bFIPSMode (DWORD = 1)
KHCU\Software\Adobe\Acrobat Reader\DC\...
- 331
0
votes
0
answers
79
views
Registry key not found migrating dns zones at Windows Server 2012 R2
We are trying to migrate all DNS zones to a new server. The old server is Windows Server 2012 R2, the new one is running Windows Server 2019.
We are following the steps: Microsoft Guide
We cannot find ...
0
votes
1
answer
18
views
If I've already created a registry entry on 2 servers, when I roll it out to the rest of the estate via Group Policy , is it "Update" or "Create"?
If I've already created a registry entry on 2 test servers, when I roll it out to the rest of the estate via Group Policy , do I choose "Update" or "Create"?
- 103
2
votes
1
answer
667
views
How does Windows set the %SystemRoot% variable?
The %SystemRoot% environment variable contains the path to the Windows directory. (e.g. c:\windows)
SystemRoot is not configured in Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session ...
- 599
0
votes
1
answer
1k
views
Registry option "do not use proxy server for local addresses"
I just create a gpo to configure proxy with this registry options:
https://theitbros.com/config-internet-explorer-11-proxy-settings-gpo/
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet ...
- 1
0
votes
1
answer
230
views
How do you disable hardware-accelerated GPU scheduling via the command line in Windows 10/11?
I need to disable, programmatically, hardware-accelerated GPU scheduling in Windows if it's enabled.
Searching, I was pointed at the HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers - HwSchMode ...
- 1,792
0
votes
1
answer
189
views
Delete selected subkeys in a registry key
I need to Delete selected subkeys in a registry key.
For one of the subkeys I need to delete I tried:
(SET _KEY=SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC)
REG Delete "HKCU\%_KEY%" /V ...
- 11
0
votes
0
answers
27
views
Windows Upgrade Removed Tag in Service Definition in Registry
We noticed that after upgrading Windows in place (from 2016->2019), our custom driver entries in the registry lost their "tag" key. The tag key is necessary for the driver to load upon ...
- 1
0
votes
2
answers
54
views
Windows "reg.exe" complaining missing user right when using "save" subcommand
When using "reg.exe" on the command line, when using the "reg.exe save" subcommand, i get the error message...
"FEHLER: Dem Client fehlt ein erforderliches Recht."
which ...
0
votes
0
answers
535
views
How to change "specify intranet microsoft update service location" group policy with powershell
I am trying to change a group policy via a PowerShell script. I understand that group policies are basically just registry keys, and you can change the underlying registry values to edit the policies. ...
0
votes
1
answer
384
views
One user has two SIDs with same profile path in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\
Why would a user on a Domain joined PC (or any PC, really) have two entries in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList, in the case as these SIDs:
S-1-5-21-...
- 45
1
vote
1
answer
433
views
How can I pull Minimum Password Length policy from Windows 10 registry?
Trying to pull the minimum password length policy information from the registry, but it appears that is no longer possible on later versions of W10?
There are a number of documented answers out there ...
- 1,669
0
votes
1
answer
587
views
Applocker - Publisher rule not working
In a bit to reduce the number of Applocker Packaged apps rules now that we are using the private store. We're looking into publisher only rules (right now, we have 1 rule per microsoft store ...
- 105
1
vote
1
answer
6k
views
Windows NTP Server Registry Configuration
I inherited an environment with a Windows 2012R2 Domain Controller (serverA) set as the NTP server. This server is going to be retired shortly for a new (separate) 2019 instance. The domain controller ...
- 688
1
vote
0
answers
258
views
Registry Key disappearing on reboot after added to read application and services logs via WMI
I have a Windows Server 2019 VM and am trying to collect some specific Windows Event Logs using Get-WmiObject
In order to read an Event Logs channel in Applications and Services, I created a registry ...
- 11
3
votes
1
answer
2k
views
Force Windows 10 to load group policy from registry
I would like to apply several group policies (for data protection purposes) on various Windows 10 machines from time to time. The target machines are running with various Windows 10 version (Home, EDU,...
- 41
1
vote
1
answer
125
views
Consequences to manually adding a entry to `HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall`
We have an application, lets call it 'App A', that when you run it checks the registry to see if another app, lets call it 'App B', is installed. It does this by searching HKEY_LOCAL_MACHINE\SOFTWARE\...
- 121
0
votes
1
answer
124
views
Is there a way to restore a backed up .reg while deleting added keys, not just overwrite existing keys?
I want do an export of the current state of the following path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
And so I can do that with:
reg export HKEY_LOCAL_MACHINE\...
- 95
0
votes
1
answer
206
views
How can I disable the Windows Game DVR from the command line?
I need to disable the Windows Game DVR for a collection of Windows computers that will be running student exam / testing software, so that students can't use the Game DVR hotkeys to record the test ...
- 755
2
votes
1
answer
1k
views
Can i update the windows registry entries for HKEY_CURRENT_USER values without elevated privileges?
Links such as the following suggest that I should be able to edit the registry without elevated privileges, as long as I only update HKEY_CURRENT_USER.
https://blog.codeinside.eu/2015/08/11/reg-exe-or-...
- 143
1
vote
1
answer
452
views
Wine in Docker - "reg add" only keeps effects temporarily
Ive been bashing my head against a wall about this.
I'm looking to add an executable to the PATH under wine on Ubuntu 20.04.
Trying to configure this from the dockerfile, but having a weird issue.
...
- 11
0
votes
0
answers
106
views
Redirect or alter specific registry key under HKEY_LOCAL_MACHINE based on the logged in user
We would like to run an application under Terminal Server that's typically designed to run on a single client machine connected via network to a local server. This will mean multiple users logged on ...
- 99
0
votes
1
answer
4k
views
Disabling auto-login via gpedit?
Recently, one of our employee has left his computer in the customer's office, which could possibly leak some information from that device(Thankfully, it didn't happened). Right now, all of our ...
- 103
0
votes
1
answer
259
views
Adding registry key via GPO creates but not affects to the system?
I could not give a detailed title to my question. But my problem is: I'm trying to add keyboard languages from Group Policy (Windows Server 2012R2) with Registry. I added like below:
Then I check (as ...
0
votes
1
answer
91
views
Additional info request on DSC Syntax for Binary Registry Key
I have more questions about implementing the solution found in: DSC Syntax for Binary Registry Key
For the most part the solution suggested by Matthew Whetmore worked... but if the data starts with &...
- 1
0
votes
1
answer
1k
views
How do I determine what Registry Keys a GPO modifies?
It seems like such a simple question, but after hours of googling I can not find a way to correlate a GPO policy and a registry key that it would modify.
Does anyone have a way to decrypt them?
1
vote
1
answer
1k
views
Will GPO setting registry keys be reapplied on reboot?
Most GPO settings are either enforced/user can't change the setting/ or applied only one time /software install/. My question is - if I set a specific registry key using a GPO and the registry key is ...
- 11
0
votes
1
answer
150
views
Why would a server in an AD environment allow Remote Registry access by FQDN, but deny and lock out accounts over IP address?
We have a situation where a software application cannot be installed because the admin account used during installation gets locked out during prerequisite checks. After some investigation, we found ...
- 3
0
votes
1
answer
345
views
How can I create a registry key on all domain machines with group policy?
I have a domain with a controller and joined workstations. I want to create a registry item on all of the connected workstations using a group policy.
I have created a group policy and tried to create ...
0
votes
1
answer
315
views
difference between two registry locations for HKLM\SOFTWARE\Microsoft\Windows\ and HKLM\SOFTWARE\Microsoft\Windows NT\
What is the difference between the two registry locations
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon:LegalNoticeText
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System:...
- 99
-1
votes
1
answer
66
views
Loading a performance DLL of a windows 7 service [closed]
I am trying to do a POC of recently published windows zeroday flaw where a vulnerability has been exposed in windows registry entries. I have created a performance subkey of a service RPCEPTMAPPER ...
- 99
3
votes
2
answers
45k
views
Checking TLS 1.2 enabled or not on my Windows Server
I need to check if TLS 1.2 is enabled on my Windows Server 2019.
In the registry the key TLS 1.2 is not present under Protocols
But when I browse on a secure website (hosted on this server in IIS) ...
- 155
0
votes
2
answers
562
views
Persistent registry settings on a workgroup computer with local group policy
From what I understand (and have tested) in What is the difference between Group Policy and Registry Policy processing in Windows?, computers within a domain would have a policy refresh every 90 to ...
1
vote
1
answer
445
views
Group Policy: existing Policy values deleted when running gpupdate
Domain Controllers (2): Samba 4
Client: Windows 10 1909 x64
After joining a computer to the domain, when I run gpupdate /force for the first time, the values under these keys are deleted:
HKLM\...
- 160
0
votes
1
answer
4k
views
Read Local "HKEY_CURRENT_USER" from another user, windows batch/powershell
Ok is a tricky question, I know.
I have a software that runs validation scripts in all computers in network. I can create my own scripts too. But I found a problem that the script runs as specific ...
- 527
3
votes
1
answer
31k
views
Microsoft Intune - How to modify Windows 10 registry settings?
Win32 app uses bat file to install software and edit registry keys. Registry keys are modified if I run bat file locally but not when run through via Intune because Intune runs installation as System.
...
- 151
0
votes
1
answer
600
views
Windows Registry CREATOR OWNER
I've got a program that creates a registry key in HKCU, but after that does not have the rights to write to it. It seems to me that CREATOR OWNER does not work.
The strange thing is that it does work ...
1
vote
0
answers
2k
views
Determine the root cause of Windows update rendering PCs unbootable
Dozens of Windows 8.1 PCs across my environment show Fatal Error: C0000022 and cannot boot any further after installing either KB4541505 or KB4541509. Automatic Repair fails; they cannot be restored ...
- 338
0
votes
1
answer
877
views
Firefox addon uninstall through registry
I have installed a Firefox add-on by adding a key-value pair in the registry under the following path-
Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/...
0
votes
0
answers
749
views
registry keys are getting imported under HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\WOW6432Node\ on windows server2016
I am trying to import registry keys along with my application installation using powershell. I am using below command to import registry values (which is placed in a file RegFileName)
reg import ".\$...
- 101
0
votes
1
answer
414
views
Delete Windows Share 'History' "the folders shared below were previously shared"?
When trying to share a folder, if there have been previous shares on folders (which have since been removed), Windows will prompt: "the folders shared below were previously shared" and ask what you ...
1
vote
2
answers
198
views
How to prevent user from disabling the Mcafee
How can I prevent user from disabling the Mcafee VirusScan Enterprise 8.8? Is there any Registry or Local Group Policy that I could do it?
- 131
0
votes
1
answer
465
views
Restrict Outlook client to corporate accounts
Does anyone have any experience with restricting Desktop clients of Outlook to only corporate accounts?
We have contractors who will be using our equipment and have our email, but they also require ...
- 103
2
votes
2
answers
5k
views
Change Registry Key Permissions Access Control List using only Command Prompt
I am trying to change the Access Control permissions on a specific registry key i'm generating using a batch file. I try using regini.exe to pull the configuration from a .ini file and run into ...
- 21
3
votes
0
answers
652
views
Microsoft IIS HTTP/2 Vulnerabilities Registry Keys Recommended Values
Microsoft "fixed" the HTTP/2 vulnerabilities recently discovered. The updates add the ability to create the registry keys to stop the vulnerabilities, they don't actually fix the vulnerabilities ...
- 159
0
votes
1
answer
1k
views
Registry mod to replace PowerShell with CMD in WinX menu (2019 new windows 10 update)
At some point in 2019 Windows 10 updated to where PowerShell is the default in the WinX menu. I'm looking for a solution to change this that can be syspreped and cloned. So a registry modification or ...
0
votes
1
answer
462
views
Registry Setting - Windows lock screen grace period
I understand that there's a registry setting for configuring a period of time after the screen saver has activated during which the user can provide input (e.g. mouse movement) and not have to log-in ...
- 283
0
votes
1
answer
214
views
Multiple values returned with GetDwordValue .uvalue
On a few systems I have GetDwordValue return duplicate values (.uvalue)
The commands are
$reg=Get-WmiObject -List -Namespace root\default -ComputerName $ip.ipaddress | Where-Object {$_.Name -eq "...
- 107
0
votes
1
answer
5k
views
Delete registry value specific to user and contained in user's hive
Trying to get a script to run across my domain to delete a registry value contained in the user's hive.
This is the path it will be located: HKCU:\Software\Microsoft\OfficeCompat\Outlook\...
- 62