Keith Miller
March 14th 04, 11:07 AM
I did some monitoring of the registry. I found that when a scheduled task was run, winlogon.exe
(running as SYSTEM) was executing:
"CreateKey HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Clsid\"
and this was overwriting the info stored there with the info found here:
"HKCU\Software\Classes\CLSID\"
The workaround is to modify the permissions for
"HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Clsid"
so as to deny SYSTEM Set Value permissions. The nice part is, you don't have to deny yourself any
permissions and can customize the icons & apply saved themes as normal.
Keith
(running as SYSTEM) was executing:
"CreateKey HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Clsid\"
and this was overwriting the info stored there with the info found here:
"HKCU\Software\Classes\CLSID\"
The workaround is to modify the permissions for
"HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Clsid"
so as to deny SYSTEM Set Value permissions. The nice part is, you don't have to deny yourself any
permissions and can customize the icons & apply saved themes as normal.
Keith