Accessing the registry...

[JLC]

Hi,
I am trying to write a small windows application that you enter a domain\username and a key and hit enter. When you do this, the program will retrieve the password (which was encrypted, but through the program it spits it out to the user unencrypted). This encrypted password is stored in the registry.

When I created it, I was an admin on the server where the registry was/is stored. But what I found out later, is that when regular non-admin users try to use the application, they get this exception:

System.ArgumentException ---> System.Security.SecurityException: Requested registry access is not allowed.

Here's a couple lines of the code where it chokes (chokes on second line)

                // connect to remote LocalMachine RegistryHive
                RegistryKey remoteLocalMachineRegKey = RegistryKey.OpenRemoteBaseKey(RegistryHive.LocalMachine, repositoryServer);
 
                // open remote respository registry key
                RegistryKey remoteRepositoryRegKey = remoteLocalMachineRegKey.OpenSubKey(regPath, RegistryKeyPermissionCheck.ReadWriteSubTree, RegistryRights.FullControl);
 
 

I have tried every variation of Registry Rights and RegistryKeyPermissionCheck, but none of the combinations seem to work.

Can anyone help me out here and maybe point me to what I am doing wrong?

Thanks so much....

[kbdevdatta]

Do the following changes on a remote computer from where you want to retrieve registry values

1. Start Registry Editor (Regedt32.exe) and go to the following subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l
2. On the Edit menu, click Add Key.
3. Enter the following values:
Key Name: SecurePipeServers
Class: REG_SZ
4. Go to the following subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurePipeServers
5. On the Edit menu, click Add Key.
6. Enter the following values:
Key Name: winreg
Class: REG_SZ
7. Go to the following subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurePipeServers\winreg
8. On the Edit menu, click Add Value.
9. Enter the following values:
Value Name: Description
Data Type: REG_SZ
String: Registry Server
10. Go to the following subkey.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurePipeServers\winreg
11. Select "winreg". Click Security and then click Permissions. Add users or groups to which you want to grant access. and allow them full control

For your case Add SERVICE and NETWORK users on Remote PC and allow full control

12. Exit Registry Editor and restart Windows.
13. If you at a later stage want to change the list of users that can access the registry, repeat steps 10-12.

Hope this will solve your problem