How to monitor which app in affecting Registry .


  1. Posts : 2
    Windows 10 Pro 1809
       #1

    How to monitor which app in affecting Registry .


    So as the title says , I have this weird issue , every time I start / restart the windows the powershell gets a disallow run key in registry .

    Firstly I thought it's because of ExecutionPolicy but I set it to unrestricted and it doesn't change when I restart while when I delete the disallow run key from registry it appear with each re/start , so is there any app/method I can use to determine which app is writing registry ? I mean if I create another user it seems to be fine , so It must be an app on this user .

    Thanks in advance
      My Computer

  2. Samuria's Avatar
    Posts : 6,032
    windows 10
       #2

    Welcome to the forum try RegMon 7.04 - Download
      My Computer

  3. hello10's Avatar
    Posts : 204
    Windows 10 Home x64
       #3

    If you want to monitor changes in Windows registry, you could try Regshot, RegistryChangesView, or SpyMe Tools.
      My Computer


  4. Posts : 2
    Windows 10 Pro 1809
    Thread Starter
       #4

    Samuria said:
    Welcome to the forum try RegMon 7.04 - Download
    Well that's a great suggestion , since it's not working on Windows 10 , I downloaded the Process Monitor , still it's a real-time monitor , which can't help me , since my problem happens when windows is booting before I even login I guess .
      My Computer


  5. Posts : 638
    Win10 x64 Pro - 2 desktops, 2 laptops
       #5

    SaberH said:
    ... I downloaded the Process Monitor , still it's a real-time monitor , which can't help me , since my problem happens when windows is booting before I even login I guess .
    Process Monitor has an option for setting boot-time logging
    How To Enable System Boot Time Logging using Process Monitor Tool
    but the information you want is going to be buried in a huge amount of data.
      My Computer

  6. Ztruker's Avatar
    Posts : 13,505
    Windows 10 Pro X64 20H4 19042.746
       #6

    Did you try the one suggested by hello10?
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:20.
Find Us




Windows 10 Forums