How to prevent writing to a specific registry key?

Page 1 of 3 123 LastLast

  1. Posts : 736
    Windows 10 x64 Pro
       #1

    How to prevent writing to a specific registry key?


    So changing registry strings is a pretty common tool around here and something ive done pretty comfortably for a long time.

    Messing with registry permissions goes above my head and is quite a bit more risky. AFAIK with my limited knowledge ACL's and the like is quite a bit more risky.

    I'd like to make this change as limited in scope as possible, and entirely reversible. Automatable via script if possible would be even better.

    Dropbox. The bane of my existence as far as overlays go. Due to windows longstanding limit for overlay icons and its poor means of prioritization, i've had to go into the registry to manage them. 90% of the time this is due to dropbox updating and leapfrogging everything.

    This fact in and of itself keeps me from enrolling in the dropbox beta builds as that would mean needing to self-modify even MORE frequently.

    So in short, how can I remove write permissions to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers and then un-do it when/if the need arises?
      My Computer


  2. Posts : 16,025
    Win 10 Pro 64-bit v1909 - Build 18363 Custom ISO Install
       #2
      My Computer


  3. Posts : 16,025
    Win 10 Pro 64-bit v1909 - Build 18363 Custom ISO Install
       #3

    Hello @klepp0906,

    Did you ever manage to find an answer to your question?
      My Computer


  4. Posts : 736
    Windows 10 x64 Pro
    Thread Starter
       #4

    yea I was able to DENY system permissions from the key, which did stop the strings from being written, the problem is somehow that also took the context menu out with it.

    still searching for a better way even though dropbox could just disable the leapfrogging behavior and the problem would be solved. Or give an option for people to disable it, or disable some of the overlays you didnt want to use etc.

    its pretty abhorrent considering windows can only accommodate 14 and dropbox ensures it takes 10 of them every time it updates but i digress.
      My Computer


  5. Posts : 5,183
    Windows 11 Home
       #5

    klepp0906 said:
    yea I was able to DENY system permissions from the key, which did stop the strings from being written, the problem is somehow that also took the context menu out with it.
    Disable Modify/Write permissions but keep Read.
    Attached Thumbnails Attached Thumbnails How to prevent writing to a specific registry key?-capture_05232021_140238.jpg  
      My Computer


  6. Posts : 736
    Windows 10 x64 Pro
    Thread Starter
       #6

    yea i was looking for the option to disable only writes for example but I couldnt find it

    How to prevent writing to a specific registry key?-image.png

    How to prevent writing to a specific registry key?-image.png

    How to prevent writing to a specific registry key?-image.png

    the first image is what I was disabling. I assume i would need to change ownership and a bunch of humdrum to get to be able to modify it in the way youve displayed in your image. Problem is ive never done it and as such dont quite grasp the inheritance/subkey settings etc. I dont want to do something thats irreversible and if you screw up a registry key youre kinda SoL.

    I did export it as a hive to cover that base, but i'd still like to understand what im getting into before i do it just because i have a fallback ;p

    I would just want to change owner from SYSTEM to Users or? Would I check the "replace all child object permissions box" or would that be un necessary?
      My Computer


  7. Posts : 7,457
    Windows 10 Home 20H2
       #7

    klepp0906 said:
    So in short, how can I remove write permissions to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers and then un-do it when/if the need arises?
    For testing only, run the following line of commands via an elevated Command Prompt after creating the Testing key:

    Code:
    Echo \Registry\machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Testing [0]>"%Temp%\T.txt" & REGINI "%Temp%\T.txt"

    See whether you can write into the Testing key.
      My Computer


  8. Posts : 5,183
    Windows 11 Home
       #8

    klepp0906 said:
    yea i was looking for the option to disable only writes for example but I couldnt find it
    Disable Inheritance first, then you click on Show Advanced Permissions.
    Attached Thumbnails Attached Thumbnails How to prevent writing to a specific registry key?-capture_05232021_141540.jpg  
      My Computer


  9. Posts : 736
    Windows 10 x64 Pro
    Thread Starter
       #9

    TairikuOkami said:
    Disable Inheritance first, then you click on Show Advanced Permissions.
    Do I Convert or Remove?
    How to prevent writing to a specific registry key?-image.png

    Also what would I do to reverse the process/put it back to the way it was as far as those converted or removed inheritance options go?

    Thanks btw.
    @Matthew Wai - im running the command now
      My Computer


  10. Posts : 7,457
    Windows 10 Home 20H2
       #10

    Thanks for running it.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 05:46.
Find Us




Windows 10 Forums