Solved

stopping 1 program that starts up via registry hklm...run

Posted on 2013-05-24
6
321 Views
Last Modified: 2013-06-16
We have a certain program that's set to start when logging on, via HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\

This is fine, however I don't want it to start when we logon as a certain user that our admins use for administration.  How can I prevent this.

I can use group policy to not process legacy run list, but I only want it to not run 1 of the programs listed.

I can move the startup to HKCU, but I don't want to alter the program.

So far the best solution is for me to change the security on the exe and deny that user rights to it.

Is there a better way?
0
Comment
Question by:JohnPaddock
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 81

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 500 total points
ID: 39195622
not really since it is in HKLM which would require the user to logon, reboot the machine and then logon again.

It runs in the machine context and not the user context, moving it out of hklm is probably the best thing to do.
0
 

Assisted Solution

by:JohnPaddock
JohnPaddock earned 0 total points
ID: 39236790
I've requested that this question be deleted for the following reason:

doesn't seem to be a good solution to this problem
0
 
LVL 81

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 500 total points
ID: 39236791
Unfortunately that is the way things work.

HKLM is at the machine level and not the user level
HKCU is at the user level.

If you want it by user then HKCU is a must, if you want by machine HKLM is preferred.
0
 

Accepted Solution

by:
JohnPaddock earned 0 total points
ID: 39238989
The best solution, although not a great one, seems to be to deny that user rights to the exe.  ve3ofa, thank you for your reply, I believe that would work, however we don't want to start altering programs installations unless really needed.  If it was only one program or 1 or 2 computers, moving reg values would be less of an issue and wouldn't require scripting or group policy to populate all the users hkcu.  Plus we're trying not to hack things up anymore as all those little changes can sometimes cause confusion\side-effects down the road.
0
 

Author Closing Comment

by:JohnPaddock
ID: 39251070
I think the simplest and safest way is to deny that certain user rights to the exe
0

Featured Post

Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Determining the an SCCM package name from the Package ID
A small collection of useful tips and tricks for Windows 10 users that I decided to write as a result of recent questions that were asked and answered at Experts Exchange. Two short video tutorials included. Enjoy..
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question