Solved

stopping 1 program that starts up via registry hklm...run

Posted on 2013-05-24
6
315 Views
Last Modified: 2013-06-16
We have a certain program that's set to start when logging on, via HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\

This is fine, however I don't want it to start when we logon as a certain user that our admins use for administration.  How can I prevent this.

I can use group policy to not process legacy run list, but I only want it to not run 1 of the programs listed.

I can move the startup to HKCU, but I don't want to alter the program.

So far the best solution is for me to change the security on the exe and deny that user rights to it.

Is there a better way?
0
Comment
Question by:JohnPaddock
  • 3
  • 2
6 Comments
 
LVL 78

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 500 total points
ID: 39195622
not really since it is in HKLM which would require the user to logon, reboot the machine and then logon again.

It runs in the machine context and not the user context, moving it out of hklm is probably the best thing to do.
0
 

Assisted Solution

by:JohnPaddock
JohnPaddock earned 0 total points
ID: 39236790
I've requested that this question be deleted for the following reason:

doesn't seem to be a good solution to this problem
0
 
LVL 78

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 500 total points
ID: 39236791
Unfortunately that is the way things work.

HKLM is at the machine level and not the user level
HKCU is at the user level.

If you want it by user then HKCU is a must, if you want by machine HKLM is preferred.
0
 

Accepted Solution

by:
JohnPaddock earned 0 total points
ID: 39238989
The best solution, although not a great one, seems to be to deny that user rights to the exe.  ve3ofa, thank you for your reply, I believe that would work, however we don't want to start altering programs installations unless really needed.  If it was only one program or 1 or 2 computers, moving reg values would be less of an issue and wouldn't require scripting or group policy to populate all the users hkcu.  Plus we're trying not to hack things up anymore as all those little changes can sometimes cause confusion\side-effects down the road.
0
 

Author Closing Comment

by:JohnPaddock
ID: 39251070
I think the simplest and safest way is to deny that certain user rights to the exe
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Several part series to implement Internet Explorer 11 Enterprise Mode
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now