Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

stopping 1 program that starts up via registry hklm...run

Posted on 2013-05-24
6
Medium Priority
?
323 Views
Last Modified: 2013-06-16
We have a certain program that's set to start when logging on, via HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\

This is fine, however I don't want it to start when we logon as a certain user that our admins use for administration.  How can I prevent this.

I can use group policy to not process legacy run list, but I only want it to not run 1 of the programs listed.

I can move the startup to HKCU, but I don't want to alter the program.

So far the best solution is for me to change the security on the exe and deny that user rights to it.

Is there a better way?
0
Comment
Question by:JohnPaddock
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 83

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 1500 total points
ID: 39195622
not really since it is in HKLM which would require the user to logon, reboot the machine and then logon again.

It runs in the machine context and not the user context, moving it out of hklm is probably the best thing to do.
0
 

Assisted Solution

by:JohnPaddock
JohnPaddock earned 0 total points
ID: 39236790
I've requested that this question be deleted for the following reason:

doesn't seem to be a good solution to this problem
0
 
LVL 83

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 1500 total points
ID: 39236791
Unfortunately that is the way things work.

HKLM is at the machine level and not the user level
HKCU is at the user level.

If you want it by user then HKCU is a must, if you want by machine HKLM is preferred.
0
 

Accepted Solution

by:
JohnPaddock earned 0 total points
ID: 39238989
The best solution, although not a great one, seems to be to deny that user rights to the exe.  ve3ofa, thank you for your reply, I believe that would work, however we don't want to start altering programs installations unless really needed.  If it was only one program or 1 or 2 computers, moving reg values would be less of an issue and wouldn't require scripting or group policy to populate all the users hkcu.  Plus we're trying not to hack things up anymore as all those little changes can sometimes cause confusion\side-effects down the road.
0
 

Author Closing Comment

by:JohnPaddock
ID: 39251070
I think the simplest and safest way is to deny that certain user rights to the exe
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
In this modest contribution, I want to share with the IT community (especially system administrators, IT Support Engineers and IT Help Desks) about Windows crashes/hangs and how to deal with these particular problems.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question