Update reg key via SCCM

Question

I would like to use SCCM to push out a reg key. The key to be updated is

HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\common

The app will need to have admin access enabled since the users do not have local admin access on their PCs.

Answer 1

if this is a kcu key, then user don't need to be admins to edit it. there are no tricks to this use PowerShell and edit the key. the deploy it using user rights.

Answer 2

Generally, a user account will have full access to read/write to their own HKCU, and, the LocalSystem account (which ConfigMgr uses when you "install for system") has full access to read/write to HKLM. LocalSystem has no access to a user's HKCU because HKCU for a user is only mounted when that particular user is logged-on.

If you are writing regkeys into HKCU you will need to do it as "install for user" and that user can be expected to have enough permissions to succeed.

Answer 3

Do they need to have local admin access in order to have full access to read/write to their own HKCU?

Answer 4

Hi,

Per my experience, no, a user account will have full access to read/write to their own HKCU. Similar threads for your reference:
Rename registry value of client machine through SCCM 2012
How Do I Deploy A reg key via sccm in HKCU

Thanks for your time. Have a nice day!

Best regards,
Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.