Solved

VBScript to Rescurse through HKEYUSERS and to remove restricted sites from each SID

Posted on 2008-10-09
2
674 Views
Last Modified: 2012-05-07
Need a VBScript to Rescurse through HKEY_USERS and to remove 1 or more  restricted sites from each SID.

I probably will have to load their hives, delete, then unload hive. But have not done before. Recently took up VBScripting a few months ago.

Thank You for any assistance.

Here is key I need to delete: HKEY_USERS\"WhateverSid"\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\FaceBook.com ,etc.
0
Comment
Question by:Inuyashapl
2 Comments
 
LVL 5

Accepted Solution

by:
si_shamil earned 225 total points
ID: 22683771
Here you go:
Const DOMAIN = "Facebook.com"
 

Const HKEY_USERS = &H80000003

Const ZMAP_REGKEY = "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\"
 

Set objReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")

objReg.EnumKey HKEY_USERS, "", arrSubkeys
 

For Each strSubkey in arrSubkeys

    strKeyPath = strSubkey & ZMAP_REGKEY & DOMAIN

    delRegKey HKEY_USERS, strKeyPath

Next

 

Sub delRegKey(pHive, byVal pKey)

	Dim objReg, strSubkey, arrSubkeys, strKey, arrSplit, intReturn

	Set objReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")

	

    ' Remove ending backslash (\) if exists

	If Right(pKey, 1) = "\" Then

		pKey = Left(pKey, Len(pkey) - 1)

	End If

    

	intReturn = objReg.EnumKey(pHive, pKey, arrSubkeys)

	If intReturn <> 0 Then Exit Sub 
 

    If isArray(arrSubkeys) Then	

        For Each strSubkey in arrSubkeys

            delRegKey pHive, pKey & "\" & strSubkey

        Next

    End If
 

    Wscript.Echo "Deleting key: " & pKey

    objReg.DeleteKey pHive, pKey

End Sub

Open in new window

0
 

Author Closing Comment

by:Inuyashapl
ID: 31618363
Modified it to open the ntuser.dat file, make change and unload hive. Thank you.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Over the years I have built up my own little library of code snippets that I refer to when programming or writing a script.  Many of these have come from the web or adaptations from snippets I find on the Web.  Periodically I add to them when I come…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now