Update reg key via SCCM

N Kerr 6 Reputation points
2022-11-16T18:51:30.703+00:00

I would like to use SCCM to push out a reg key. The key to be updated is

HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common

The app will need to have admin access enabled since the users do not have local admin access on their PCs.

Microsoft Configuration Manager Application
Microsoft Configuration Manager Application
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Application: A computer program designed to carry out a specific task other than one relating to the operation of the computer itself, typically to be used by end users.
470 questions
Microsoft Configuration Manager
0 comments No comments
{count} votes

4 answers

Sort by: Most helpful
  1. Garth 5,801 Reputation points
    2022-11-16T19:29:24.3+00:00

    if this is a kcu key, then user don't need to be admins to edit it. there are no tricks to this use PowerShell and edit the key. the deploy it using user rights.

    1 person found this answer helpful.
    0 comments No comments

  2. Gideoney 446 Reputation points
    2022-11-17T06:23:45.193+00:00

    Generally, a user account will have full access to read/write to their own HKCU, and, the LocalSystem account (which ConfigMgr uses when you "install for system") has full access to read/write to HKLM. LocalSystem has no access to a user's HKCU because HKCU for a user is only mounted when that particular user is logged-on.

    If you are writing regkeys into HKCU you will need to do it as "install for user" and that user can be expected to have enough permissions to succeed.

    1 person found this answer helpful.
    0 comments No comments

  3. N Kerr 6 Reputation points
    2022-11-18T13:54:39.937+00:00

    Do they need to have local admin access in order to have full access to read/write to their own HKCU?

    0 comments No comments

  4. Simon Ren-MSFT 31,836 Reputation points Microsoft Vendor
    2022-11-22T09:25:48.22+00:00

    Hi,

    Per my experience, no, a user account will have full access to read/write to their own HKCU. Similar threads for your reference:
    Rename registry value of client machine through SCCM 2012
    How Do I Deploy A reg key via sccm in HKCU

    Thanks for your time. Have a nice day!

    Best regards,
    Simon


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments