{"id":263,"date":"2023-08-30T09:35:39","date_gmt":"2023-08-30T15:35:39","guid":{"rendered":"https:\/\/tekweis.com\/?p=263"},"modified":"2024-04-22T18:18:45","modified_gmt":"2024-04-23T00:18:45","slug":"using-powershell-to-read-registry-hkey_users","status":"publish","type":"post","link":"https:\/\/tekweis.com\/index.php\/2023\/08\/30\/using-powershell-to-read-registry-hkey_users\/","title":{"rendered":"Using Powershell to read registry HKEY_USERS"},"content":{"rendered":"\n
This is a small example I put together on how to quickly loop through each user SID in HKEY_USERS and find the value that shows what the wallpaper is set to for each user. This little script is a decent reference to use for finding (And with a little modification, setting) registry value(s) in the HKEY_USERS section. <\/p>\n\n\n\n
<#\n.DESCRIPTION\n Example to show how you can go through each user branch in registry \n HKEY_USERS and retrieve the wallpaper file path key.\n#>\n\n$hkUsers = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey('USERS', $env:COMPUTERNAME)\n$hkUsersSubkeys = $hkUsers.GetSubKeyNames()\n\n$hkUsersSubkeys | % {\n\n $hkeyuserpath = \"$_\\Control Panel\\Desktop\"\n $hkeyuserpath = \"REGISTRY::HKEY_USERS\\$hkeyuserpath\"\n\n Write-Host \"`nUSER: $_\"\n $wallpaperfile = (Get-ItemProperty -Path $hkeyuserpath -ErrorAction SilentlyContinue).Wallpaper\n Write-Host \"WALLPAPER: $wallpaperfile`n`n====================\"\n\n}\n<\/code><\/pre>\n\n\n\nScript execution. Shows the wallpaper path and file used for each user account in HKEY_USERS of the Windows registry.<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"
![\"\"](\"https:\/\/tekweis.com\/wp-content\/uploads\/2023\/08\/UserWallpaperOutput.jpg\")