Write in HKCU from other account

[Sn00f]

Hi all,

I would like to know if it exists a tool to change registry settings from an unconnected account:

for example I would like to change a user HKCU setting but I'm loggued as administrator or SYSTEM Account.

OR

Is it possible through script or .cmd file (not the runas command, because it should be without user entry)

because My users can't write into the registry and I would like to, with a script or a special program to launch at startup. (RunOnce)

any ideas?

[maxXPsoft]

You can change their settings by loading their Hive: http://www.dougknox.com/xp/tips/xp_adv_reg_editing.htm

Funny but that was very next post under this one when I read this.

[Sn00f]

thanx for responding!

I already check your url but I would like to do it with a script.

I'll try to look at your second Idea

Thanks a lot!

[Sn00f]

hum great interesting!

but how can I extract the pid from the registry and put it into a variable, all that with a script?

For example:

name=user1

pid= S-1-5-21-1605980848-1645125239-839522115-1001

-> get way to user1 (hklm\...)

->user1 pid = S-1-5-21-1605980848-1645125239-839522115-1001

-> insert S-1-5-21-1605980848-1645125239-839522115-1001 into variable

customisation.cmd:

hkey_user\S-1-5-21-1605980848-1645125239-839522115-1001\blablabla

regedit /s bla bla bla

any ideas?->

[SC00BS]

Users have rights to their HKCU keys so i dont see what the problem is.

Unless you have a policy where they cannot access regedit and are trying to

import .reg files.

Instead of using .reg file modify your script to use reg add this will allow users to

modify their HKCU keys even with policy restricting regedit.

[Sn00f]

Instead of using .reg file modify your script to use reg add this will allow users to

modify their HKCU keys even with policy restricting regedit.

hum I didn't know that.

I have restricted the registry acces to other users, that's why I wanted to inser value into it with administrator or System account...

I have to check reg ADD.....

[SC00BS]

use reg import that definetly works.

create your desired reg files and then

reg import your.reg file

[Sn00f]

hum, reg (import)? is that an external program ?

[SC00BS]

REG.EXE is a command line tool that comes with XP

IMPORT is one of the switches that are available with REG.EXE

[Sn00f]

hum, I work on Win2k, that's why it didn't work....

[SC00BS]

If you dont have have it get it from here

LINK

[Sn00f]

thanks a lot for your presious help!

i'll try and tell you ! THX ! (perhaps only on tuesday:-) )

[Sn00f]

is the windows XP version newer than this one?

Command-line registry manipulation utility version 1.10.

Copyright Microsoft Corporation 1997. All rights reserved.

[maxXPsoft]

Yes

C:\WINDOWS\system32>reg.exe /?

Console Registry Tool for Windows - version 3.0

I have used it with NT4.0 Workstation so I would assume it will work on W2K

Now for what you was asking on how to get USER names

Save as a .vbs file

On Error Resume Next
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_Account",,48)
For Each objItem in colItems
    Wscript.Echo "LocalAccount: " & objItem.LocalAccount
    Wscript.Echo "Name: " & objItem.Name
    Wscript.Echo "SID: " & objItem.SID
    Wscript.Echo "SIDType: " & objItem.SIDType
Next

You can modify that simply. You can also read/write to reg with WScript BTW

Edited October 29, 2004 by maxXPsoft

[Sn00f]

thanks a lot!

could you send the "new" reg.exe v3.0?

I tried the .vbs ;but it showed me plenty of little windows (with user name, sid ....)

is it possible to do this just like an "ipn" variable?

for /F "tokens=1 delims=." %%A in ('ipn') do set logname=%%A

echo %logname%: >> t:\Logs\name.txt

for /F "tokens=1 delims=." %%A in ('<vbsscript>') do set pid=%%A

(pid= S-1-5-21-1605980848-1645125239-839522115-1001)

reg add hku\%pid%\blablabla?