Rick Raisley

"Bob Butler" <noway@nospam.ever> wrote in message
news:%23z8yJgJ1HHA.1212@TK2MSFTNGP05.phx.gbl...
> Vista "virtualizes" the registry so the attempts to access values under
HKLM
> get redirected to HKCU\Software\Classes\VirtualStore\Machine but I've run
> into a problem because it also appears to work the opposite way as well.
>
> I have an app that needs to scan the entire HKCU hive and it works great
> except that when I get to the VirtualStore key it picks up all the keys
and
> values from HKLM as well. I'm running with UAC enabled and am logged on
as
> a user without admin rights and the code below gives me a whole long list
of
> keys. The odd thing is that when I run regedit.exe without elevation I
see
> just a few keys so there must be a way to turn off virtualization when
> reading these keys.
>

Isn't this to be expected? When a normal user is logged in, virtualization
means that they see the virtualized data, be it files or Registry. So, like
when looking at My Documents, when you browse HKCU, you are seeing the
user's "version" of HKLM. Just like when you look at your Desktop you see
all /your/ items, but also all items in the All Users Desktop. Even though
only the /added/ items are actually on the user's desktop.

I don't really have an answer to your question, except that I think the
situation you're seeing should be expected, and it would seem that if you
/really/ want to see what's there, you'll need to log on as an Admin. Then
you should see what the "real" configuration is.

--
Regards,

Rick Raisley
>