How does the win8 system open and connect to the remote registry service

In Windows, the remote registry service is a standard service supported by the win8 system. This can be seen from two methods.

First, you can see the existence of this function in the "Editor's File" dialog box of the Registry Editor.

The second is to enter the command "Runs" in the "Run" dialog box and press the Enter key. In the pop-up "Services" window, you can see specifically for remote management. Service items for registry design.

The latter is a service item for enabling remote management of the registry function. The former is used to connect to the remote registry. Obviously, to open the remote management registry function, you need to double-click the “Remote Registry Service” item in the job window, and enable it in the pop-up property window as shown.

After you have enabled the remote management registry function, you can click the <quo;File”→“Connect to the network registry" menu item in the "Registry Editor" Enter the IP address of the remote computer in the pop-up dialog box and prepare to connect.

Since the registry belongs to the core database in the system, a login dialog will pop up later, where you must enter an account with administrator privileges to log in.

After completing the login, the registry management item for the remote computer appears in the Registry Editor.

At this point, you can manage the remote registry, such as creating, deleting, and renaming.

After modifying the remote host's registry, you need to disconnect the network registry by selecting the remote win8 download computer name or IP address in the "Registry Editor" window, click Right click and select “Disconnect” from the pop-up menu.

In addition to analyzing other registryes, we can also customize some special operations by loading the configuration unit file. For example, you can customize the operation of a newly created account that is only run once when you log in. The specific method is:

In the "Run” column, enter “Regedt32” and press Enter to open the Registry Editor window. After selecting the sub-tree of “HKEY_USERS”, click “File”→“Load Hive” menu.

In the "Load Hive" window, select the "Ntuser.dat" file in the "C:DocumentsandSettingsDefaultUser” folder.

Click the "open" button, in the pop-up dialog box, enter the name of the new item, such as test.

In the Registry Editor window, expand to the following sub-item: HKEY_USERSTestSoftwareMicrosoftWindowsCurrentVersion

Create a new item named "Runonce" under the CurrentVersion subkey, and select the "Runonce" option. And on the right side create a REG_SZ value called Test.bat (optional), enter the contents of its properties into the file path and file name (such as C:test.bat) to be run once.

After selecting the Text item, click the “File”→“Uninstall the Configuration Unit" menu, and click the “Yes> button to confirm the uninstall operation.

After closing the Registry Editor window, create a new account with any name in the system and log in with this account. The C:test.bat file is automatically called after logging in to the desktop environment. This call will only occur on the first login of each new account and will not occur during the subsequent login process.

In addition, you can use the WinPE boot CD to view, modify or import/export the contents of the registry. The method is also very simple. Therefore, we can say that the design of the Win8 system registry in terms of local security is very weak. After many experienced computers log in to the host, the modification of the registry can be almost arbitrary.