?
Solved

stopping 1 program that starts up via registry hklm...run

Posted on 2013-05-24
6
Medium Priority
?
322 Views
Last Modified: 2013-06-16
We have a certain program that's set to start when logging on, via HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\

This is fine, however I don't want it to start when we logon as a certain user that our admins use for administration.  How can I prevent this.

I can use group policy to not process legacy run list, but I only want it to not run 1 of the programs listed.

I can move the startup to HKCU, but I don't want to alter the program.

So far the best solution is for me to change the security on the exe and deny that user rights to it.

Is there a better way?
0
Comment
Question by:JohnPaddock
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 82

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 1500 total points
ID: 39195622
not really since it is in HKLM which would require the user to logon, reboot the machine and then logon again.

It runs in the machine context and not the user context, moving it out of hklm is probably the best thing to do.
0
 

Assisted Solution

by:JohnPaddock
JohnPaddock earned 0 total points
ID: 39236790
I've requested that this question be deleted for the following reason:

doesn't seem to be a good solution to this problem
0
 
LVL 82

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 1500 total points
ID: 39236791
Unfortunately that is the way things work.

HKLM is at the machine level and not the user level
HKCU is at the user level.

If you want it by user then HKCU is a must, if you want by machine HKLM is preferred.
0
 

Accepted Solution

by:
JohnPaddock earned 0 total points
ID: 39238989
The best solution, although not a great one, seems to be to deny that user rights to the exe.  ve3ofa, thank you for your reply, I believe that would work, however we don't want to start altering programs installations unless really needed.  If it was only one program or 1 or 2 computers, moving reg values would be less of an issue and wouldn't require scripting or group policy to populate all the users hkcu.  Plus we're trying not to hack things up anymore as all those little changes can sometimes cause confusion\side-effects down the road.
0
 

Author Closing Comment

by:JohnPaddock
ID: 39251070
I think the simplest and safest way is to deny that certain user rights to the exe
0

Featured Post

Are You Using the Best Web Development Editor?

The worlds of web hosting and web development are constantly evolving. Every year we see design trends change, coding standards adapt and new frameworks/CMS created. With such a quick pace of change it’s easy to get lost trying to keep up.

See if your editor made the list.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
In this post we will be converting StringData saved within a text file into a hash table. This can be further used in a PowerShell script for replacing settings that are dynamic in nature from environment to environment.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question