Print Page | Close Window

Windows GPO Editor vs programmatic registry edit

Printed From: Sysinternals
Category: Windows Discussions
Forum Name: Internals
Forum Description: Windows internals information
URL: https://forum.sysinternals.com/forum_posts.asp?TID=32931
Printed Date: 24 February 2018 at 10:02pm
Software Version: Web Wiz Forums 11.06 - http://www.webwizforums.com


Topic: Windows GPO Editor vs programmatic registry edit
Posted By: TheLopper
Subject: Windows GPO Editor vs programmatic registry edit
Date Posted: 16 July 2017 at 8:44pm
How is it that I may freely change GPO settings via the editor as opposed to making a change to the registry via a C++ program or command line?

For example:

If I wanted to disable the Properties option from the Recycle Bin context menu I can do that if I open up the Local Group Policy Editor and goto "Local Computer Policy > User Configuration > Administrative Templates > Desktop > Remove Properties from the Recycle Bin context menu", enable the policy, which sets a value under the key, "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer", with the name NoPropertiesRecycleBin and a value of 1. And everything works fine.

Now let's say I directly modify/create/access this key, say from a C++ program, or even the command line, why do I get an an Access Denied Error?



Print Page | Close Window

Forum Software by Web Wiz Forums® version 11.06 - http://www.webwizforums.com
Copyright ©2001-2016 Web Wiz Ltd. - https://www.webwiz.co.uk