Classic Shell
http://www.classicshell.net/forum/

Does per-user configuration override HKLM configuration?
http://www.classicshell.net/forum/viewtopic.php?f=7&t=139		 Page 1 of 1
Author:  Cuvis [ Thu Jan 24, 2013 12:48 pm ]
Post subject:  Does per-user configuration override HKLM configuration?
I'm looking at deploying Classic Start Menu in an enterprise as part of our migration to Win 7. I saw in another topic that one can "lock" settings down by exporting them from the HKCU hive in the registry and putting them into the HKLM hive, but I'd like to also have some per-user settings (for instance, removing the Control Panel from the menu for non-admin users). Would I be able to write these directly into HKCU and have them override the settings in HKLM? If not, is there a way to lock out the settings dialog and still be able to write settings into HKCU?
Author:  Gaurav [ Thu Jan 24, 2013 12:52 pm ]
Post subject:  Re: Deploying Classic Start Menu in an enterprise
If a setting exists in the HKLM branch or in both, it is locked. If it exists only in HKCU branch, it is user-changeable. It's like Group Policy's Computer Configuration vs User Configuration, but unlike Policy, it's not enforced if in HKCU. So more like Group Policy Preferences.
Author:  Cuvis [ Thu Jan 24, 2013 12:53 pm ]
Post subject:  Re: Does per-user configuration override HKLM configuration?
OK, but if it exists in both, which one takes precedence? The HKLM setting or the HKCU setting?
Author:  Gaurav [ Thu Jan 24, 2013 12:55 pm ]
Post subject:  Re: Does per-user configuration override HKLM configuration?
HKLM.
Author:  Cuvis [ Thu Jan 24, 2013 12:56 pm ]
Post subject:  Re: Does per-user configuration override HKLM configuration?
Damn, that's a problem, then. Thanks for the prompt answer, even if it wasn't what I wanted to hear.
Author:  Ivo [ Thu Jan 24, 2013 1:02 pm ]
Post subject:  Re: Does per-user configuration override HKLM configuration?  Topic is solved
HKLM takes precedence obviously, otherwise it defeats the purpose of allowing an admin to lock certain settings.
If you have a way to prevent users from accessing the HKCU (like with regedit), you can adjust their settings and then set EnableSettings to 0 to disable the settings UI. If you set EnableSettings to 0 in HKCU, it will be per user. If you set it in HKLM, it will be for all users. Of course if a user has access to regedit he can re-enable his settings. He won't even need to, as he can edit the settings directly in the registry.
Author:  Cuvis [ Thu Jan 24, 2013 1:51 pm ]
Post subject:  Re: Does per-user configuration override HKLM configuration?
That's perfect. We lock our users out of Regedit using Group Policy, so the fact that they can re-enable settings is no problem at all. Thanks!
Page 1 of 1 All times are UTC - 8 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/