🚀 go-pugleaf

"Brian Lonnon" <lonnon@screaming.net> wrote in message
news:40dde673$1@newsgroups.borland.com...

> How can I allow ordinary users to write to keys in HKEY_LOCAL_MACHINE?

You probably can't, they wouldn't have the necessary access rights
available, unless you use REGEDT32.EXE to adjust the access rights on the
individual keys themselves.

> I want my program to set NukeOnDelete
>
in(HKEY_LOCAL_MACHINE\Software\Microsoft\windows\currentversion\explorer\bit
> bucket) to 1 at startup and reset it to 0 on exit.

The only ways for a non-admin to do that is if the key's security rights are
changed via REGEDT32.EXE.  Otherwise, you need admin rights.  For a
non-admin to gain admin rights without reconfiguring the system, you would
have to make a separate service which itself runs under the SYSTEM (and thus
an admin) account.  Then the program running under the non-admin user could
communicate with the service running under an admin account, and have the
service behave on the program's behalf.

> Logged on as Administrator, there is no problem. Logged
> on as a user without admin rights, any attempt to write to
> the key fails.

As well it should.  Non-admin users don't have writing privileges to HKLM by
default.


Gambit