Jump to content











Photo
- - - - -

Registry Key querie

Started by ispy , Jul 04 2008 06:36 AM

  • Please log in to reply
6 replies to this topic

#1 ispy

ispy

    Silver Member

  • Tutorial Writer
  • 646 posts
  • Location:PILGRIM

Posted 04 July 2008 - 06:36 AM

Hi All :) ,

I want to be able to create some unattended registry keys that will be capable of turning off & on services and components.

could someone provide some basic instruction on how you would go about this & some freeware utils to undertake .reg keys for XP Home.

Regards & Best Wishes,

ispy :)

#2 rawr

rawr

    Frequent Member

  • Advanced user
  • 163 posts

Posted 04 July 2008 - 09:51 AM

-------------------------backup first ! & u know this !

caling : regedit from cmd
& notepad.exe (to edit text -.REG-file's)

Import, export or delete registry settings from a text (.REG) file
http://www. ss64.com/nt/regedit.html
^This seems more understanable

..than the below ms\kb but its erly hear
.. maby it just my weekend stared erly :)

http:// support.microsoft.com/kb/310516

----
its also posible from script with-in winbuilder (im geusing :) )
| Edit: nolonger geusing .. this may be of intrest
| 'N00b question -- regwrite, how to write long binary data'
| http:// www.boot-land.net/forums/?showtopic=4948

other posiblity is with wsh (http://en.wikipedia....ows_Script_Host )
http://www. ss64.com/wsh/ < refrence
(with quotes eg in http://www. ss64.com/wsh/regwrite.htm
'"Nothing is permanent" - Buddha' :) )

#3 Brito

Brito

    Platinum Member

  • .script developer
  • 10616 posts
  • Location:boot.wim
  • Interests:I'm just a quiet simple person with a very quiet simple life living one day at a time..
  •  
    European Union

Posted 04 July 2008 - 12:19 PM

I'm wb orientated so I would recommend it as a freeware tool to disable those services.

Since you do not need to remove the services but rather disable them, then you might as well use scripts with options to match the user preferences.

wb can also run during the unattended install portion of windows XP to apply your registry modifications.

Without uninstalling anything, you only need to modify the "start" key of the respective service and a .reg file is also a good solution.

Look here for an example of a .reg file:
;Disable Quality of Service Packet Scheduler

&#91;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PSched&#93;

&#34;Start&#34;=dword&#58;00000004

source:
http://www.msfn.org/...php/t39776.html

From memory I'm not sure about the possible "Start" values, maybe some other member can help and provide the missing details.

Good luck.

:)

#4 ispy

ispy

    Silver Member

  • Tutorial Writer
  • 646 posts
  • Location:PILGRIM

Posted 04 July 2008 - 08:58 PM

Hi Nuno/rawral :) ,

Many thanks for the reply & advice, I seem to have dropped lucky on this occasion & have found the relevant keys albeit they will need tweaking a touch ("Start"=dword:0000000X just alter 'X' to whatever you want 2=Auto, 3=Manual, 4=Disabled but be careful [Novices] as XP Needs certain services set to auto or it could damage your system!) & are listed as follows:

; @@@@@@@@@@@@@@@@
; @@@ SERVICES @@@ START CODES: 2=Auto, 3=Manual, 4=Disabled
; @@@@@@@@@@@@@@@@

; Alerter
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Alerter]
"Start"=dword:00000004

; Application Layer Gateway Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ALG]
"Start"=dword:00000004

; Application Management
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt]
"Start"=dword:00000003

; Automatic Updates
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
"Start"=dword:00000002

; Background Intelligent Transfer Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS]
"Start"=dword:00000003

; Clipbook
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ClipSrv]
"Start"=dword:00000003

; COM+ Event System
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventSystem]
"Start"=dword:00000003

; COM+ System Application
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COMSysApp]
"Start"=dword:00000003

; Computer Browser
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser]
"Start"=dword:00000002

; Cryptographic Services
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc]
"Start"=dword:00000003

; DHCP Client
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp]
"Start"=dword:00000002

; Distributed Link Tracking Client
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrkWks]
"Start"=dword:00000003

; Distributed Transaction Coordinator
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC]
"Start"=dword:00000003

; DNS Client
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache]
"Start"=dword:00000002

; Error Reporting Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ERSvc]
"Start"=dword:00000004

; Event Log
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog]
"Start"=dword:00000002

; Fast User Switching Compatibility
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FastUserSwitchingCompatibility]
"Start"=dword:00000003

; Help and Support
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\helpsvc]
"Start"=dword:00000003

; HID Input Service (or Human Interface Device Access)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HidServ]
"Start"=dword:00000004

; IMAPI CD-Burning COM Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ImapiService]
"Start"=dword:00000003

; Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]
"Start"=dword:00000003

; IPSEC Services
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent]
"Start"=dword:00000004

; Logical Disk Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dmserver]
"Start"=dword:00000003

; Logical Disk Manager Administrative Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dmadmin]
"Start"=dword:00000003

; Machine Debug Manager (installed with MS Office)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MDM]
"Start"=dword:00000004


; Messenger
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]
"Start"=dword:00000004

; MS Software Shadow Copy Provider
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SwPrv]
"Start"=dword:00000003

; Net Logon
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon]
"Start"=dword:00000003

; NetMeeting Remote Desktop Sharing
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mnmsrvc]
"Start"=dword:00000004

; Network Connections
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netman]
"Start"=dword:00000003

; Network DDE
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetDDE]
"Start"=dword:00000003

; Network DDE DSDM
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetDDEdsdm]
"Start"=dword:00000003

; Network Location Awareness (NLA)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Nla]
"Start"=dword:00000003

; NT LM Security Support Provider
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtLmSsp]
"Start"=dword:00000003

; Performance Logs and Alerts
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysmonLog]
"Start"=dword:00000003

; Plug and Play
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PlugPlay]
"Start"=dword:00000002

; Portable Media Serial Number
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmdmPmSp]
"Start"=dword:00000004

; Print Spooler
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler]
"Start"=dword:00000002

; Protected Storage
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProtectedStorage]
"Start"=dword:00000002

; QoS RSVP
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RSVP]
"Start"=dword:00000003

; Remote Access Auto Connection Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto]
"Start"=dword:00000003

; Remote Access Connection Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan]
"Start"=dword:00000003

; Remote Desktop Help Session Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDSessMgr]
"Start"=dword:00000004

; Remote Procedure Call (RPC) - DO NOT CHANGE THIS!!!
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs]
"Start"=dword:00000002

; Remote Procedure Call (RPC) Locator
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator]
"Start"=dword:00000003

; Remote Registry
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
"Start"=dword:00000004

; Removable Storage
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtmsSvc]
"Start"=dword:00000003

; Routing and Remote Access
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess]
"Start"=dword:00000004

; Secondary Logon
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\seclogon]
"Start"=dword:00000003

; Security Accounts Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SamSs]
"Start"=dword:00000003

; Server
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver]
"Start"=dword:00000003

; Shell Hardware Detection
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ShellHWDetection]
"Start"=dword:00000002

; Smart Card
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardSvr]
"Start"=dword:00000004

; Smart Card Helper
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardDrv]
"Start"=dword:00000004

; Speed Disk Service (part of Norton SystemWorks)
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Speed Disk service]
"Start"=dword:00000004

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Speed Disk service]
"Start"=dword:00000004

; SSDP Discovery Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV]
"Start"=dword:00000003

; System Event Notification
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SENS]
"Start"=dword:00000002

; System Restore Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srservice]
"Start"=dword:00000002

; Task Scheduler
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule]
"Start"=dword:00000002

; TCP/IP NetBIOS Helper
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LmHosts]
"Start"=dword:00000003

; Telephony
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv]
"Start"=dword:00000004

; Telnet
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr]
"Start"=dword:00000004

; Terminal Services
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService]
"Start"=dword:00000003

; Themes
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes]
"Start"=dword:00000003

; Uninterruptible Power Supply
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPS]
"Start"=dword:00000004

; Universal Plug and Play Device Host
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost]
"Start"=dword:00000003

; Upload Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\uploadmgr]
"Start"=dword:00000004

; Volume Shadow Copy
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS]
"Start"=dword:00000003

; WebClient
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient]
"Start"=dword:00000002

; Windows Audio - missing from original file
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AudioSrv]
"Start"=dword:00000002

; Windows Image Acquisition (WIA) - change to 2 if you have a scanner
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\stisvc]
"Start"=dword:00000003

; Windows Installer
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSIServer]
"Start"=dword:00000003

; Windows Management Instrumentation
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\winmgmt]
"Start"=dword:00000002

; Windows Management Instrumentation Driver Extensions
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wmi]
"Start"=dword:00000003

; Windows Time
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time]
"Start"=dword:00000002

; Wireless Zero Configuration
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WZCSVC]
"Start"=dword:00000002

; WMI Performance Adapter
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmiApSrv]
"Start"=dword:00000004

; Workstation
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation]
"Start"=dword:00000002

All these services can also be "Tweaked" in Nlite also to preset the users choices! On top of this I have found a nifty util on MSFN which probably some will know about But I will post the details elsewhere & edit this post later on as it is related to this post (Freeware & portable) :) .
See Here http://www.boot-land...?showtopic=5113
Regards & Best Wishes

ispy :)

#5 Brito

Brito

    Platinum Member

  • .script developer
  • 10616 posts
  • Location:boot.wim
  • Interests:I'm just a quiet simple person with a very quiet simple life living one day at a time..
  •  
    European Union

Posted 05 July 2008 - 12:27 AM

Glad you found the solution.

Thanks for posting the .reg key changes.

:)

#6 rawr

rawr

    Frequent Member

  • Advanced user
  • 163 posts

Posted 05 July 2008 - 04:31 PM

AHH! .. reg2WBS, .reg to WinBuilder script
http://www.boot-land...mp;showfile=114

..
[app script] RegShot
Registry compare utility
[app script] RegScanner
Scan the Registry and find desired Registry values
Runscanner
Load remote registry and run a progem, v1.0.0.21

#7 ispy

ispy

    Silver Member

  • Tutorial Writer
  • 646 posts
  • Location:PILGRIM

Posted 05 July 2008 - 08:18 PM

Hi Nuno/rawral :) ,

Many thanks Guys for the replies!

@ Nuno - No problem only to pleased to help
@ rawral - Great utils, went to NirSoft for regscanner found these in addition to regscanner, free & portable Kewl:
@ Peter - & last but not least psc for "reg2WBS, .reg to WinBuilder script," nice one!

1) RegFromApp - Generate RegEdit .reg file from Registry changes made by application.
2) RegDllView - View registered dll/ocx/exe files on your system and unregister/delete unwanted registrations.
3) CleanAfterMe - Clean Registry entries and files in your system

From: http://www.nirsoft.n...regscanner.html

I particularly like number 1) RegFromApp I think this will prove very useful in the future!

Regards & Respect,

ispy :)
Back to Requests


1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

  1. reboot.pro
  2. → Groups
  3. → Community forum
  4. → Requests
  5. Privacy Policy
  6. Site policies ·