Does anyone know if I can limit modification of my registry keys to only my application?
Background:
- My app installs under Administrator only.
- The app runs under limited user accounts, but is able to modify app-specific registry values under LOCAL_MACHINE, since the values are shared.
- AI currently creates the keys under LOCAL_MACHINE, with write access granted to Everyone
But I'd like to limit modification of values to only my app, to prevent tampering by limited users using regedit.
I"m not sure if there's a way to accomplish this through a combination of AI and my app (.NET) behavior.
I see that AI can create user accounts, but I'm not sure if that would be part of the solution.
Suggested Articles
Re: Limit certain registry modification to application
Hi,
This can be done by creating an user from Advanced Installer and setting READ and WRITE Registry permissions from the Registry page for that user. Eventually you can set just READ permission for Everyone so any user can see the registry key without the modify alternative.
In your application you can create a process that manipulates the registry by impersonating that user.
You can find more details here.
Hope this helps.
Best regards,
Cristi
______________________________
Cristi Costache
Advanced Installer Team
http://www.advancedinstaller.com/
This can be done by creating an user from Advanced Installer and setting READ and WRITE Registry permissions from the Registry page for that user. Eventually you can set just READ permission for Everyone so any user can see the registry key without the modify alternative.
In your application you can create a process that manipulates the registry by impersonating that user.
You can find more details here.
Hope this helps.
Best regards,
Cristi
______________________________
Cristi Costache
Advanced Installer Team
http://www.advancedinstaller.com/