How do you merge .reg files under SUA?

Status
Not open for further replies.

Ink

Administrator
Verified
Staff Member
Well-known
Jan 8, 2011
22,361
You can't, Windows Registry is a protected area. You need to enter the admin password on the UAC prompt, otherwise access is denied. Alternatively log into an admin user account and merge file with Registry.

Edit: No mention of OS, but UAC has been present since Vista.
 
Last edited:

tim one

Level 21
Verified
Honorary Member
Top Poster
Malware Hunter
Jul 31, 2014
1,086
Generally, a standard user can use the computer with restrictions: it does not have access to the administrator's folders or of other users, it can not install or uninstall programs, it can not add new users, it can modify a very limited set of settings (mainly related to his account, for example, the combinations of colors, or the icons), it can not install new hardware, it can't access the registry, it doesn't have access to the protected system folders, etc.
 
W

Wave

Your best bet is learning to program and writing a program to modify the Registry; some areas can be accessed without administrative privileges however not from the Windows Registry I don't believe (since it'll require administrator privileges to open it).

That is why non-elevated programs can still add to start-up (for the current user) via the registry without requiring administrative privileges. However, even if programs can do this, you cannot open the Windows Registry without granting administrative privileges.

There might be a work around, I believe that it will require administrative privileges due to the manifest file set to "requireAdministrator" or "highestAvailable", therefore if you're good with reversing, you might be able to change that to how it is by default... And as long as regedit.exe doesn't check it's privileges during run-time then you'll be good to go (and if it does you'll need OllyDbg/IDA Pro and then set breakpoints with the debugger and trick the program into believing it's running as admin when it's not through variable manipulation in memory).
 
  • Like
Reactions: tim one
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top