VBScript to Rescurse through HKEYUSERS and to remove restricted sites from each SID

Posted on 2008-10-09
Last Modified: 2012-05-07
Need a VBScript to Rescurse through HKEY_USERS and to remove 1 or more  restricted sites from each SID.

I probably will have to load their hives, delete, then unload hive. But have not done before. Recently took up VBScripting a few months ago.

Thank You for any assistance.

Here is key I need to delete: HKEY_USERS\"WhateverSid"\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ,etc.
Question by:Inuyashapl

Accepted Solution

si_shamil earned 225 total points
ID: 22683771
Here you go:
Const DOMAIN = ""

Const HKEY_USERS = &H80000003

Const ZMAP_REGKEY = "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\"

Set objReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")

objReg.EnumKey HKEY_USERS, "", arrSubkeys

For Each strSubkey in arrSubkeys

    strKeyPath = strSubkey & ZMAP_REGKEY & DOMAIN

    delRegKey HKEY_USERS, strKeyPath



Sub delRegKey(pHive, byVal pKey)

	Dim objReg, strSubkey, arrSubkeys, strKey, arrSplit, intReturn

	Set objReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")


    ' Remove ending backslash (\) if exists

	If Right(pKey, 1) = "\" Then

		pKey = Left(pKey, Len(pkey) - 1)

	End If


	intReturn = objReg.EnumKey(pHive, pKey, arrSubkeys)

	If intReturn <> 0 Then Exit Sub 

    If isArray(arrSubkeys) Then	

        For Each strSubkey in arrSubkeys

            delRegKey pHive, pKey & "\" & strSubkey


    End If

    Wscript.Echo "Deleting key: " & pKey

    objReg.DeleteKey pHive, pKey

End Sub

Open in new window


Author Closing Comment

ID: 31618363
Modified it to open the ntuser.dat file, make change and unload hive. Thank you.

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Over the years I have built up my own little library of code snippets that I refer to when programming or writing a script.  Many of these have come from the web or adaptations from snippets I find on the Web.  Periodically I add to them when I come…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now