Solved

Delete Registry Keys/Values on Windows ME/2000

Posted on 2001-07-24
5
151 Views
Last Modified: 2010-04-06
I need help writing a procedure or function that would be able to do the following on Windows ME/2000:

- programatically secure the appropriate 'Privileges', no matter what level of user is logged on, and then delete any given registry key (or just it's values), and optionally all subkeys
- reset the 'Privileges' back to where they were (if necessary) afterwards
0
Comment
Question by:camou
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 21

Expert Comment

by:gemarti
ID: 6315293
Here is a taste of what you are looking for; I created an app for work that controls how the user interacts with Windows.

This is not the full code!!!!!!


var
 i,j : integer;
begin
  reg := TRegistry.Create;
  with reg do
    try
     //Set the RootKey to be evaluated
     RootKey := HKEY_LOCAL_MACHINE;
     //Need to review this key so open it up and get the network information
     OpenKey('\System\CurrentControlSet\Services\VxD\VNETSUP',True);
     CN := ReadString('ComputerName');
     WG := ReadString('WorkGroup');
     CD := ReadString('Comment');
     //Got what is needed so let's close it up.
     CloseKey;
     //Now let's see if the user is required to log on
     //if the value is 0 then logging on is required.
     //if the value is 1 then logging on is not required.
     OpenKey('\Network\Logon',true);
     val := TStringList.Create;
     try
      GetValueNames(val);
      //There may not be any data under this key so we need to create a Value Name and data
      if val.Count = 0 then
        begin
          WriteInteger('MustBeValidated',0);
          //These are the updatable fields
          cbMustBeValidated.Checked := false;
          EMustBeValidated.Text := IntToStr(mbv);
          EMustBeValidated.Hint := 'Validation is not required';
          //These are the current settings fields. Don't use these for
          //anything but for showing the user the current settings of the
          //machine.
          ECurrentmbv.Text := IntToStr(mbv);
          ECurrentmbv.Hint := 'Validation is not required';
        end;
      for I:=0 to Val.Count-1 do
        begin
          if Val.Strings[I] = 'MustBeValidated' then
            mbv := ReadInteger('MustBeValidated');
        end;

       if mbv = 0 then
         begin
           //These are the updatable fields
           cbMustBeValidated.Checked := false;
           EMustBeValidated.Text := IntToStr(mbv);
           EMustBeValidated.Hint := 'Validation is not required!';
           //These are the current settings fields. Don't use these for
           //anything but for showing the user the current settings of the
           //machine.
           ECurrentMBV.Text := IntToStr(mbv);
           ECurrentMBV.Hint := 'Validation is not required!';
         end
       else
         begin
           //These are the updatable fields
           cbMustbeValidated.Checked := true;
           //WriteInteger('MustBeValidated',mbv);
           EMustBeValidated.Text := IntToStr(mbv);
           EMustBeValidated.Hint := 'Validation is required!';
           //These are the current settings fields. Don't use these for
           //anything but for showing the user the current settings of the
           //machine.
           ECurrentMBV.Text := IntToStr(mbv);
           ECurrentMBV.Hint := 'Validation is required!';
         end;
     CloseKey;
     finally;
       Val.Free;
     end;
   finally;
     reg.free; //Free TRegistry
   end;//try

  //Recreate TRegistry component
  reg := TRegistry.Create;
  with reg do
    try
     //Set the RootKey to be evaluated
     RootKey := HKEY_USERS;
     //Need to review this key so open it up and get the network information
     OpenKey('\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Network',True);
     val := TStringList.Create;
     try
      GetValueNames(val);

      //There may not be any data under this key so we need to create a Value Name and data
      if val.Count = 0 then
        begin
          WriteInteger('NoNetSetup',1);
          //These are the updatable fields
          cbNoNetSetup.Checked := true;
          ENoNetSetup.Text := IntToStr(nns);
          ENoNetSetup.Hint := 'The network properties cannot be displayed or modified!';
          //These are the current settings fields. Don't use these for
          //anything but for showing the user the current settings of the
          //machine.
          ECurrentNNS.Text := IntToStr(nns);
          ECurrentNNS.Hint := 'The network properties cannot be displayed or modified!';
        end;


      //If Val.Count is greater than zero then there must be a value name and data under the key so lets get that
      //information and display it on the screen.
      for I:=0 to Val.Count-1 do
        begin
          if Val.Strings[I] = 'NoNetSetup' then
            nns := ReadInteger('NoNetSetup');
          if nns = 0 then
           begin
             //These are the updatable fields
             cbNoNetSetup.Checked := false;
             ENoNetSetup.Text := IntToStr(nns);
             ENoNetSetup.Hint := 'The network properties can be displayed and modified!';
             cbNoNetSetup.Hint := ENoNetSetup.Hint;
             // These are the current settings fields. Don't use these for
             //anything but for showing the user the current settings of the
             //machine.
             ECurrentNNS.Text := IntToStr(nns);
             ECurrentNNS.Hint := 'The network properties can be displayed and modified!';
           end
         else
           begin
             //These are the updatable fields
             cbNoNetSetup.Checked := true;
             ENoNetSetup.Text := IntToStr(nns);
             ENoNetSetup.Hint := 'The network properties cannot be displayed or modified!';
             cbNoNetSetup.Hint := ENoNetSetup.Hint;
             //These are the current settings fields. Don't use these for
             //anything but for showing the user the current settings of the
             //machine.
             ECurrentNNS.Text := IntToStr(nns);
             ECurrentNNS.Hint := 'The network properties cannot be displayed or modified!';
           end;
         end;
     CloseKey;
     finally;
       Val.Free;
     end;
   finally;
     reg.free; //Free TRegistry
   end;//try

   // Determine if the registry editor is enabled or disabled. if it is enabled then 0 else 1
  //Recreate TRegistry component
  reg := TRegistry.Create;
  with reg do
    try
     //Set the RootKey to be evaluated
     RootKey := HKEY_USERS;
     //Need to review this key so open it up and get the network information
     OpenKey('\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\System',True);
     val := TStringList.Create;
     try
      GetValueNames(val);
      //There may not be any data under this key so we need to create a Value Name and data
      if val.Count = 0 then
        begin
          WriteInteger('DisableRegistryTools',0);
          //These are the updatable fields
          cbDisableRegistryTools.Checked := false;
          EDisableRegistryTools.Text := IntToStr(drt);
          EDisableRegistryTools.Hint := 'The registry editing tools can be displayed and modified!';
          cbDisableRegistryTools.Hint := EDisableRegistryTools.Hint;
          //These are the current settings fields. Don't use these for
          //anything but for showing the user the current settings of the
          //machine.
          ECurrentDRT.Text := IntToStr(drt);
          ECurrentDRT.Hint := EDisableRegistryTools.Hint;
        end;
0
 
LVL 20

Accepted Solution

by:
Madshi earned 200 total points
ID: 6316165
Basically you just need to call RegDeleteKey. Unfortunately you have to do it recursively in winNT/2000/XP, because only 9x based systems delete the subkeys automatically for you.
About privileges: Here is a function which simply enables all privileges the current user has. You don't need to undo that. If the user does not even *have* the necessary privileges (regardless of whether they're enabled or not) to delete the specified registry key, you can forgot it. You can't give yourself more privileges than you have. That's NT system security.

procedure EnableAllPrivileges;
var c1, c2 : dword;
    ptp    : PTokenPrivileges;
    i1     : integer;
begin
  if OpenProcessToken(windows.GetCurrentProcess, TOKEN_ADJUST_PRIVILEGES or TOKEN_QUERY, c1) then
    try
      c2 := 0;
      GetTokenInformation(c1, TokenPrivileges, nil, 0, c2);
      if c2 <> 0 then begin
        ptp := AllocMem(c2);
        if GetTokenInformation(c1, TokenPrivileges, ptp, c2, c2) then begin
          for i1 := 0 to integer(ptp^.PrivilegeCount) - 1 do
            ptp^.Privileges[i1].Attributes := ptp^.Privileges[i1].Attributes or SE_PRIVILEGE_ENABLED;
          AdjustTokenPrivileges(c1, false, ptp^, c2, PTokenPrivileges(nil)^, cardinal(pointer(nil)^));
        end;
        FreeMem(ptp);
      end;
    finally CloseHandle(c1) end;
end;

Regards, Madshi.
0
 
LVL 21

Expert Comment

by:gemarti
ID: 6316718
Madshi: this gets privelages from the Network Authentication?

Wasn't the question how to control the local machine?  What if the privelages are not set up on the network to a level that you control what the user can or cannot do on an idividual machine? I'm just curious. I'm going to take a closer look at your code for my own personal interest....There is defintely a use for it in my job.
0
 
LVL 20

Expert Comment

by:Madshi
ID: 6316835
In winNT each user (regardless whether it is a local or a network user) has a specific collection of privileges. Furthermore some of them are enabled, some are not. My function does nothing but enabling all available privileges. That's it. You can't give yourself more privileges than your user has, you can only enable all what you have.

Regards, Madshi.
0
 

Author Comment

by:camou
ID: 6322761
Madshi gets the points -- his comments and code really helped me understand how to get the most (privileges) out of NT. :)
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Delphi TcxGrid group footer summary 3 389
CheckListBox usage 3 96
Delphi Seattle StructureView color 1 31
TlistView is Really heavy on Android 3 42
This article explains how to create forms/units independent of other forms/units object names in a delphi project. Have you ever created a form for user input in a Delphi project and then had the need to have that same form in a other Delphi proj…
Hello everybody This Article will show you how to validate number with TEdit control, What's the TEdit control? TEdit is a standard Windows edit control on a form, it allows to user to write, read and copy/paste single line of text. Usua…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question