Modify control permissions - custom self-starting program

Now many software, such as WinDIY, MyIM, etc., will automatically add the string value of the software under HKEY_LOCAL_MacHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run after each run, the purpose is In order to run the software at system startup.

But many times this kind of function makes us feel distressed. If you modify it manually, you can modify it after running the software every time, which is very troublesome. In fact, as long as you modify the current user control of the HKEY_LOCAL_MacHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run key, only set to "read", you can prevent the program's "self-assertion."

The method is to run the registry editor (Windows 2000 with regedt32), right-click HKEY_LOCAL_MA-CHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run, select "Permissions → Advanced" (here is for "from the parent" Inherited permissions" function can not be directly modified), select the user or user group (usually Administrators) that needs to be modified in the "Permissions" control page, and then click the "Edit" button, then follow the settings in the figure, the Administrators user The control permission for this registry key is changed to read only. Because the programs we run are all run with the current user rights, the program only has "read" permission for the registry key. This modification can also effectively prevent some Trojans and viruses from modifying the registry startup items. After all, most of our users now use the Administrator to log in to the system. Using this principle, we can also restrict permissions on some folders of the system, such as preventing the system from starting too slowly by prohibiting the "write" permission to the %systemroot%\\prefetch folder. .