Key Info DB

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskma
n]
Data type: REG_SZ, Range: Names of executable files,
Default value: Taskmgr.exe 
Description 
Specifies the task manager that the system uses. You can add this entry to the r
egistry to specify an alternate task manager. 
Note 
Windows 2000 does not add this entry to the registry. You can add it by editing
the registry or by using a program that edits the registry. 
Info sources 
http://technet.microsoft.com/en-us/library/cc957402.aspx
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System
]
Data type: REG_SZ, Range: Names of executable files,
Default value: lsass.exe 
Windows 2000 does not use this entry. The entry remains in the registry to suppo
rt programs designed for Windows NT 4.0 or earlier. 
Caution 
Do not delete this entry from the registry or change its value. These changes ca
n cause serious, unexpected results. 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userin
it]
Data type: REG_SZ, Range: Names of executable files (fil
ename extension not required), Default value: userinit 
Specifies the programs that Winlogon runs when a user logs on. By default, Winlo
gon runs Userinit.exe, which runs logon scripts, reestablishes network connectio
ns, and then starts Explorer.exe, the Windows user interface. 
You can change the value of this entry to add or remove programs. For example, t
o have a program run before the Windows Explorer user interface starts, substitu
te the name of that program for Userinit.exe in the value of this entry, then in
clude instructions in that program to start Userinit.exe. You might also want to
substitute Explorer.exe for Userinit.exe if you are working offline and are not
using logon scripts. 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell]
ename extension not required), Default value: Explorer.exe 
Specifies the programs that provide the user interface to the operating system. 
By default, Winlogon starts the programs specified in the value of Userinit, inc
luding Userinit.exe. Userinit.exe starts the user interface program. However, if
Winlogon cannot start the programs specified in the value of Userinit, Winlogon
directly runs the programs specified in the value of this entry. 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\VmAppl
et]
ename extension not required), Default value: rundll32 shell32,Con
trol_RunDLL "sysdm.cpl" 
Specifies programs that Winlogon runs for the user so that the user can adjust t
he configuration of virtual memory when there is no paging file on the system vo
lume. 
These programs run only when the system volume does not include a paging file.
Caution 
Do not change the value of this entry. If you do, you can damage the virtual mem
ory configuration of Windows 2000. 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\BootExecute
]
Data type: REG_BINARY, Range: Command or executable prog
ram, Default value: autocheck autochk * 
Specifies the applications, services, and commands executed during startup. 
For example, if Convert.exe has been used to convert the file system on a hard d
isk drive, you can add the following command to BootExecute to convert the file
system when Windows 2000 is restarted: 
BootExecute = autocheck autoconv \DosDevices\x: /FS:NTFS 
Note 
Do not delete the default value, autocheck autochk *, from the value of BootExec
ute. To prevent Autochk.exe from running on specific volumes or from running at
all, use Chkntfs.exe. 
Tip 
For more information on Autochk, Chkntfs, and Convert, see the Microsoft Knowled
ge Base link on the Web Resources page. Search the Knowledge Base using the keyw
ords Autochk, Chkntfs, and Convert. 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDL
L]
The GINA operates in the context of the Winlogon process and, as such, the GINA
DLL is loaded very early in the boot process. The GINA DLL must follow rules so
that the integrity of the system is maintained, particularly with respect to int
eraction with the user. 
The most common use of the GINA is to communicate with an external device such a
s a smart-card reader. It is essential to set the start parameter for the device
driver to system (Winnt.h: SERVICE_SYSTEM_START) to ensure that the driver is l
oaded by the time the GINA is invoked. 
The purpose of a GINA DLL is to provide customizable user identification and aut
hentication procedures. The default GINA does this by delegating SAS event monit
oring to Winlogon, which receives and processes CTL+ALT+DEL secure attention seq
uences (SASs). A custom GINA is responsible for setting itself up to receive SAS
events (other than the default CTRL+ALT+DEL SAS event) and notifying Winlogon w
hen SAS events occur. Winlogon will evaluate its state to determine what is requ
ired to process the custom GINA's SAS. This processing usually includes calls to
the GINA's SAS processing functions. 
http://msdn.microsoft.com/en-us/library/windows/desktop/aa380543%28v=vs.85%29.as
px
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\]
Entry name: Program Name, Data type: REG_SZ, Valu
e: File name 
The Run subkey of HKEY_LOCAL_MACHINE\Software stores the names of programs that
Windows 2000 runs for all users of the computer each time the system starts up. 
Each entry in the subkey represents a program. The value of the entry is the nam
e of the executable file for the program. 
http://msdn.microsoft.com/en-us/library/aa376977%28v=VS.85%29.aspx
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\]
Entry name: Program Name, Data type: REG_SZ, Valu
e: File name 
The RunOnce subkey stores the names of programs that Windows 2000 runs at startu
p, for all users of the computer, the next time the system starts. When these pr
ograms are run, their names are deleted from the RunOnce subkey so that they do
not run again automatically. 
Each entry in the subkey represents a program. The value of the entry is the nam
e of the executable file for the program. 
http://msdn.microsoft.com/en-us/library/aa376977%28v=VS.85%29.aspx
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\load]
Data type: REG_SZ, Range: [Path]File name(s), Def
ault value: (This entry has no default value.) 
Specifies the programs that run when Windows 2000 starts. The programs are minim
ized (appears as a taskbar icon) while they are running. 
This entry stores a list of file names of programs or files associated with an a
pplication. Each file name must be separated from the others by a space. If the
file is not located in the Systemroot directory, you must specify the path to th
e file. 
Change method 
To load a program at startup, add the application to Systemroot\Documents and Se
ttings\All Users\Start Menu\Programs\Startup. Right-click the icon, click Proper
ties, click the Shortcut tab, and select Minimized from the Run drop-down menu.
This will not actually change the value of the load entry, but it will emulate t
he behavior. 
http://msdn.microsoft.com/en-us/library/ms815201.aspx
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\run]
Data type: REG_SZ, Range: [Path]File name(s), Def
ault value: (This entry has no default value.) 
Specifies the applications the user directs Windows 2000 to run at startup. 
This entry stores a list of file names of applications or documents associated w
ith an application. Each file name must be separated from the others by a space.
If the file is not located in the Systemroot directory, you must specify the pa
th to the file. 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\AutoRun]
Data type: REG_SZ, Range: list of commands, Defau
lt value: (There is no default value for this entry.) 
Contains commands that are run each time you start Cmd.exe. 
To change the value of this entry, use Command Processor (Cmd.exe). 
Note 
AutoRun can appear in HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER. If both appear i
n the registry, the value of the entry in HKEY_CURRENT_USER takes precedence ove
r the value in HKEY_LOCAL_MACHINE. 
The command line switches take precedence over the registry settings. 
Tip 
To disable AutoRun for one use of the command processor, at the command prompt,
type CMD /D. 
For more information about the AutoRun feature, at the command prompt, type CMD
/?. 
http://technet.microsoft.com/de-de/library/cc779439%28v=ws.10%29.aspx
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Command Processor\AutoRun]
Data type: REG_SZ, Range: list of commands, Defau
lt value: (There is no default value for this entry.) 
Contains commands that run each time you start Cmd.exe. 
To change the value of this entry, use Command Processor (Cmd.exe). 
Note 
AutoRun can appear in HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER. If both appear i
n the registry, the value of the entry in HKEY_CURRENT_USER takes precedence ove
r the value in HKEY_LOCAL_MACHINE. 
The command-line switches take precedence over the registry settings. 
Tip 
To disable AutoRun for one use of the command processor, at the command prompt,
type CMD /D. 
For more information about the AutoRun feature, at the command prompt, type CMD
/?. 
http://technet.microsoft.com/de-de/library/cc779439%28v=ws.10%29.aspx
[HKEY_CURRENT_USER\Control Panel\Desktop\SCRNSAVE.EXE]
Data type: REG_SZ, Range: File name, Default valu
e: (There is no default value for this entry.) 
Specifies the name of the screen saver executable file. 
To change the value of this entry, double-click Display in Control Panel. Click
the Screen Saver tab, and then select a screen saver from the Screen saver list.
 
Note 
Windows 2000 adds this entry to the registry when you use Display in Control Pan
el to select a screen saver. If you disable all screen savers, by choosing (None
) from the Screen Saver list, Windows 2000 deletes this entry from the registry.
 
This entry can be superceded by a Group Policy included in Windows 2000. While t
he Screen saver executable name Group Policy is enabled, the system ignores this
entry. The setting of the Screen saver executable name Group Policy is stored i
n the SCRNSAVE.EXE entry, which is in the Policies subkey. 
http://msdn.microsoft.com/en-us/library/dd405477%28v=vs.85%29.aspx
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Control Panel\Desktop\SCRNSAVE.EXE
]
Data type: REG_SZ, Range: Path and file name, Def
ault value: (There is no default value for this entry.) 
Description
Specifies the screen saver used, and prevents users from changing it. 
This entry stores the setting of the Screen saver executable name Group Policy.
Group Policy adds this entry to the registry when you enable the policy. If you
disable the policy or set it to Not configured, Group Policy deletes this entry
from the registry. 
If this entry appears in the registry, the system uses the screen saver specifie
d in the value of this entry. Also, the system disables the list of screen saver
s on the Screen Saver tab in Display in Control Panel, so users cannot change th
e screen saver. 
The value of this entry must include the executable name of a valid Windows scre
en saver file, including the .scr file name extension. If the screen saver file
is not in the Systemroot\System32 directory, the value must include the fully qu
alified path to the file. If the specified screen saver is not installed on the
computer, no screen saver runs. 
To change the value of this entry, use Group Policy. This entry corresponds to t
he Screen saver executable name Group Policy (User Configuration\Administrative
Templates\Control Panel\Display). 
Note 
The Screen saver executable name policy can be superceded by the No screen saver
Group Policy (which corresponds to the ScreenSaveActive entry). If the value of
the ScreenSaveActive entry is 0, then screen savers do not run on the computer,
and the SCRNSAVE.EXE entry is ignored. 
This entry takes precedence over a user setting. When this entry appears in the
registry, a policy is in effect, and the system ignores the value of the SCRNSAV
E.EXE entry in the HKCU\Control Panel\Desktop subkey. 
Tip 
For detailed information about particular Group Policy settings, see the Windows
2000 Resource Kit Group Policy Reference. 
For general information about Group Policy, see Windows 2000 Server Help or Wind
ows 2000 Professional Help. 
To see a table associating policies with their corresponding registry entries, s
ee the Group Policy Registry Table. 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\]
The Monitors subkey stores entries for print monitors installed on Windows 2000.
The Monitors subkey contains a subkey for each port monitor that stores configu
ration data for the port monitor installed on the system. 
Related Entries 
Monitors subkey for LanMan Print Services network printers 
http://support.microsoft.com/kb/102966
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\AlternateShell]
Data type: REG_SZ, Range: Program name, Default v
alue: cmd.exe 
Lists the name of the alternative environment used when the Safe mode with Comma
nd Prompt option is selected. 
To start Windows 2000 in safe mode, restart the computer, and then press F8 when
you see the message Please select the operating system to start. 
Note 
For information about starting the computer in safe mode, see Windows 2000 Serve
r Help or Windows 2000 Professional Help. 
Caution 
Changing the value of this entry can prevent Windows 2000 from starting. 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs]
The KnownDLLs subkey defines the set of dynamic-link libraries (DLLs) that are s
earched during system startup. 
In general, these are system DLLs that are loaded from disk into a section of me
mory and are then checked for integrity. These DLLs consume some resources, even
if no application loads them. 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\She
ll]
Data type: REG_SZ, Range: Path and file name, Def
ault value: (There is no default value for this entry.) 
Specifies an alternate user interface for Windows 2000. 
This entry stores the setting of the Custom user interface Group Policy. Group P
olicy adds this entry to the registry when you enable the policy. If you disable
the policy or set it to Not configured, Group Policy deletes this entry from th
e registry. 
The Explorer program (Explorer.exe) creates the familiar Windows interface, but
you can use this entry to specify an alternate interface. When this entry appear
s in the registry, the system starts the interface you specify instead of Explor
er.exe. 
Value: (Not in registry), Meaning: Explorer.exe is used as the interface. 
Value: executable file name, Meaning: The specified program is used as the inter
face. 
The value of this entry must include the file name of the interface program, inc
luding the .exe file name extension. If the interface program file is not in a f
older specified in the Path environment variable for the system, the entry must
include the fully qualified path to the file. 
To change the value of this entry, use Group Policy. This entry corresponds to t
he Custom user interface Group Policy (User Configuration\Administrative Templat
es\System). 
Tip 
To find the folders indicated by the Path environment variable, in Control Panel
double-click System, click the Advanced tab, click the Environment Variables bu
tton, and then, in the System variables box, click Path. 
For detailed information about particular Group Policy settings, see the Windows
2000 Resource Kit Group Policy Reference. 
For general information about Group Policy, see Windows 2000 Server Help or Wind
ows 2000 Professional Help. 
To see a table associating policies with their corresponding registry entries, s
ee the Group Policy Registry Table. 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSp
ace_Catalog5\Catalog_Entries\]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protoc
ol_Catalog9\Catalog_Entries\]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
\]
http://msdn.microsoft.com/en-us/library/windows/desktop/aa379402%28v=vs.85%29.as
px
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command\]
http://support.microsoft.com/?kbid=310585
[HKEY_CURRENT_USER\SOFTWARE\Classes\exefile\shell\open\command\]
http://support.microsoft.com/?kbid=310585

Key Info DB

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Key Info DB

Uploaded by

Copyright:

Available Formats

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskma

You might also like