Version: 7
restore

Contents

Method

RegistryUserValueExists

ModuleNativeServices
LibraryCore
Action

Checks whether a given value exists for every user under HKU.

Parameters

Subkey (string): The registry key to look under.

Name (string): The name of the registry value to check.

Return values

Exists (boolean): True if the value exists, false if it doesn't.

Sid (string): SID of the user.

Username (string): Domain\Username of the aforementioned SID.

Example
 NativeServices.RegistryUserValueExists(Subkey:"Console\\%SystemRoot%_System32_cmd.exe", Name:"FaceName");
Platforms
  • Windows
Notes

There is a limit of 8192 values being returned. This limit applies to all users in total, not per user. This is currently not changeable.

If information is retrieved from the .DEFAULT key or a _Classes key, the Username will be reported as "Unknown". It is possible to determine the owner of a _Classes key from the SID that precedes it (which will have a correct Username).

Warning

This method may attempt to call AD to translate a SID to a username.