why SYSTEM service can't read HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run?

Asked Mar 03 '15 at 09:13

Active Mar 03 '15 at 10:25

Viewed 835 times

I run a SYSTEM service but cannot read HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run.

but run with current user can do.

HKEY hKey;
DWORD dwType=0;
TCHAR szValueName[MAXBYTE]={0};
TCHAR szValueKey[MAXBYTE]={0};
DWORD dwBufferSize=MAXBYTE;
DWORD dwKeySize=MAXBYTE;
if(RegOpenKey(HKEY_CURRENT_USER,"Software\\Microsoft\\Windows\\CurrentVersion\\Run",&hKey)!=ERROR_SUCCESS)
{
    return;
}

int i=0;
while(TRUE)
{
    if(RegEnumValue(hKey,i,szValueName,&dwBufferSize,NULL,&dwType,(LPBYTE)szValueKey,&dwKeySize)==ERROR_NO_MORE_ITEMS)
    {
        break;
    }
    printf("%s\n",szValueName);
    i++;
    dwBufferSize = MAXBYTE;
    dwKeySize = MAXBYTE;
    ZeroMemory(szValueName,MAXBYTE);
    ZeroMemory(szValueKey,MAXBYTE);
}

edited Mar 03 '15 at 10:25

tod

1,539
4
17
43

asked Mar 03 '15 at 09:13

AloneMonkey

2

there is no current user for a system service – wimh Mar 03 '15 at 09:14
so how can I start service with current user? – AloneMonkey Mar 03 '15 at 09:16
or how to read it with system service? – AloneMonkey Mar 03 '15 at 09:19
You use HKEY_LOCAL_MACHINE hive. – Phylogenesis Mar 03 '15 at 09:28
This question should show you how to impersonate the logged in user from a service: [How to impersonate a user from a service correctly?](http://stackoverflow.com/questions/19796409/how-to-impersonate-a-user-from-a-service-correctly) – Ionut Mar 03 '15 at 09:47

why SYSTEM service can't read HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run?

0 Answers0