Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

stopping 1 program that starts up via registry hklm...run

Posted on 2013-05-24
6
Medium Priority
?
324 Views
Last Modified: 2013-06-16
We have a certain program that's set to start when logging on, via HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\

This is fine, however I don't want it to start when we logon as a certain user that our admins use for administration.  How can I prevent this.

I can use group policy to not process legacy run list, but I only want it to not run 1 of the programs listed.

I can move the startup to HKCU, but I don't want to alter the program.

So far the best solution is for me to change the security on the exe and deny that user rights to it.

Is there a better way?
0
Comment
Question by:JohnPaddock
  • 3
  • 2
5 Comments
 
LVL 84

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 1500 total points
ID: 39195622
not really since it is in HKLM which would require the user to logon, reboot the machine and then logon again.

It runs in the machine context and not the user context, moving it out of hklm is probably the best thing to do.
0
 

Assisted Solution

by:JohnPaddock
JohnPaddock earned 0 total points
ID: 39236790
I've requested that this question be deleted for the following reason:

doesn't seem to be a good solution to this problem
0
 
LVL 84

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 1500 total points
ID: 39236791
Unfortunately that is the way things work.

HKLM is at the machine level and not the user level
HKCU is at the user level.

If you want it by user then HKCU is a must, if you want by machine HKLM is preferred.
0
 

Accepted Solution

by:
JohnPaddock earned 0 total points
ID: 39238989
The best solution, although not a great one, seems to be to deny that user rights to the exe.  ve3ofa, thank you for your reply, I believe that would work, however we don't want to start altering programs installations unless really needed.  If it was only one program or 1 or 2 computers, moving reg values would be less of an issue and wouldn't require scripting or group policy to populate all the users hkcu.  Plus we're trying not to hack things up anymore as all those little changes can sometimes cause confusion\side-effects down the road.
0
 

Author Closing Comment

by:JohnPaddock
ID: 39251070
I think the simplest and safest way is to deny that certain user rights to the exe
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
MS Outlook undoubtedly is the most widely used email client.Its user-friendliness, cost effectiveness, and availability with Microsoft Office Suite make it the most popular email application.  Its compatibility with Microsoft applications like Exch…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Suggested Courses

581 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question