1

I have a plugin that is being loaded to the IE and tries to read the registry in

HKCU\Software...

path, and being denied. What are the paths in registry (if any) that are permitted to the add-on that should be compatible with the EPM, for read/write? Thanks!

Rubén
  • 34,714
  • 9
  • 70
  • 166
Sanich
  • 1,739
  • 6
  • 25
  • 43

1 Answers1

0

This is not well documented by Microsoft/MSDN but this preso by Mark Yason has some good info.

It describes that access is based upon the “ALL APPLICATION PACKAGES” ACE, which gives read access to the following:

  • HKCU\Software...\Explorer\RunMRU
  • HKCU\Software...\Explorer\RecentDocs
  • HKCU\Software...\Internet Explorer\TypedURLs
  • HKLM\Software...\Low Rights\ElevationPolicy
  • HKLM\Software...\Windows NT\CurrentVersion (Registered Owner/Org.)

And it lets you write to:

  • HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\

Note that these are registry areas controlled by MSFT and their access can change in the future.

However, being controlled by an ACE means that access can be obtained via out-of-band means, such as an installer.

LBC
  • 411
  • 3
  • 9