Update reg key via SCCM

N Kerr 6 Reputation points
2022-11-16T18:51:30.703+00:00

I would like to use SCCM to push out a reg key. The key to be updated is

HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common

The app will need to have admin access enabled since the users do not have local admin access on their PCs.

Microsoft Security | Intune | Configuration Manager | Application
Microsoft Security | Intune | Configuration Manager | Other
0 comments No comments
{count} votes

4 answers

Sort by: Most helpful
  1. Garth 5,801 Reputation points
    2022-11-16T19:29:24.3+00:00

    if this is a kcu key, then user don't need to be admins to edit it. there are no tricks to this use PowerShell and edit the key. the deploy it using user rights.

    1 person found this answer helpful.
    0 comments No comments

  2. Gideoney 446 Reputation points
    2022-11-17T06:23:45.193+00:00

    Generally, a user account will have full access to read/write to their own HKCU, and, the LocalSystem account (which ConfigMgr uses when you "install for system") has full access to read/write to HKLM. LocalSystem has no access to a user's HKCU because HKCU for a user is only mounted when that particular user is logged-on.

    If you are writing regkeys into HKCU you will need to do it as "install for user" and that user can be expected to have enough permissions to succeed.

    1 person found this answer helpful.
    0 comments No comments

  3. N Kerr 6 Reputation points
    2022-11-18T13:54:39.937+00:00

    Do they need to have local admin access in order to have full access to read/write to their own HKCU?

    0 comments No comments

  4. Simon Ren-MSFT 40,346 Reputation points Microsoft External Staff
    2022-11-22T09:25:48.22+00:00

    Hi,

    Per my experience, no, a user account will have full access to read/write to their own HKCU. Similar threads for your reference:
    Rename registry value of client machine through SCCM 2012
    How Do I Deploy A reg key via sccm in HKCU

    Thanks for your time. Have a nice day!

    Best regards,
    Simon


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.