I have done this by using a combination of Reg.exe and VBScript... This could quite easily be converted to a NT CMD file instead of VBS... Note also that I rushed this code together based on a previous implementation of it so I may have left something out... I wouldn't be surprised if there were a couple of errors... The concept works though. The code will iterate through all the profiles on a PC excluding system accounts, all users and the current logged in user. For the current user profile simply edit HKCU either by importing a reg file or using oShell.RegWrite Cheers, Timshel here is the VBS code.... Dim oShell : Set oShell = WScript.CreateObject("Wscript.Shell") Dim oFS : Set oFS = WScript.CreateObject("Scripting.FileSystemObject") Dim strCUProfile : strCUProfile = strCUProfile = oShell.Environment("Process")("UserProfile") Dim oFolder For Each oFolder In oFS.GetFolder("C:\Documents and Settings").SubFolders If oFS.FileExists (oFolder &"\NTUser.DAT") _ And LCase(oFolder.Name) <> LCase(strCUProfile) _ And LCase(oFolder.Name) <> LCase("LocalService") _ And LCase(oFolder.Name) <> LCase ("NetworkService") _ And LCase(oFolder.Name) <> LCase("All Users") Then oShell.Run "cmd /c reg load HKLM\TempHive " &Chr(34) &oFolder &"\NTUser.DAT" &Chr(34), ,1 'Put your registry hacks here... 'Either use oShell.RegWrite... eg below... 'oShell.RegWrite "HKLM\TempHive\Software\MySoftware\MyDword", 1, "REG_DWORD" 'OR 'Run "Regedit.exe /s REGHack.Reg" and import a premodified reg file - the key in the reg file start With 'HKEY_Local_Machine\TempHive\ 'eg below... 'oShell.Run "Regedit.exe /s RegHack.reg" oShell.Run "cmd /c reg unload HKLM\TempHive", 0, True End If Next
