Windows registry security center

Please rate your experience Yes No. Any additional feedback? Note Security features in Windows let an administrator control access to registry keys. Note There is a 64K limit for the total size of all values of a key.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. In this article. Contains the root of the configuration information for the user who is currently logged on. The user's folders, screen colors, and Control Panel settings are stored here. This information is associated with the user's profile. This key is sometimes abbreviated as HKCU. Contains all the actively loaded user profiles on the computer.

Contains configuration information particular to the computer for any user. This key is sometimes abbreviated as HKLM. The information that is stored here makes sure that the correct program opens when you open a file by using Windows Explorer. This key is sometimes abbreviated as HKCR. Contains information about the hardware profile that is used by the local computer at system startup.

Raw binary data. Most hardware component information is stored as binary data and is displayed in Registry Editor in hexadecimal format. Data represented by a number that is 4 bytes long a bit integer. Many parameters for device drivers and services are this type and are displayed in Registry Editor in binary, hexadecimal, or decimal format. A variable-length data string. This data type includes variables that are resolved when a program or service uses the data.

A multiple string. Values that contain lists or multiple values in a form that people can read are generally this type. Entries are separated by spaces, commas, or other marks. A series of nested arrays that is designed to store a resource list that is used by a hardware device driver or one of the physical devices it controls. A series of nested arrays that is designed to store a device driver's list of possible hardware resources the driver or one of the physical devices it controls can use.

This data is detected by the system and is displayed in Registry Editor in hexadecimal format as a Binary Value. A series of nested arrays that is designed to store a resource list that is used by a physical hardware device. Data without any particular type.

This data is written to the registry by the system or applications and is displayed in Registry Editor in hexadecimal format as a Binary Value. Data represented by a number that is a bit integer. Secure mode. Only the service SID has permissions for these resources. Compatible mode. The provider host process allows access to the NetworkService or LocalService accounts depending on the hosting model.

For more information about hosting models, see Provider Hosting and Security. Windows Vista and Windows Server To access the registry keys and values for controlling secure and compatible modes for the provider host process, you must install the security update in KB The secure and compatible mode settings are specified through registry keys.

This key controls the behavior of individual providers. All of the providers that are listed in this key always run in secure mode. All inbox providers that are shipped with Windows are listed under this key, and are run in secure mode by default. This key takes precedence over providers listed in the CompatibleHostProviders key. All providers that are listed in this key always run in compatible mode.

This key is empty by default. If a provider is listed both in the SecuredHostProviders key and in the CompatibleHostProviders key, the provider is run in secure mode. Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. Feedback will be sent to Microsoft: By pressing the submit button, your feedback will be used to improve Microsoft products and services.

Privacy policy. The Windows security model enables you to control access to registry keys. For more information about security, see Access-Control Model. If you specify NULL , the key gets a default security descriptor. The ACLs in a default security descriptor for a key are inherited from its direct parent key.

When you call the RegOpenKeyEx function, the system checks the requested access rights against the key's security descriptor.