UEM import Profile with reg.exe import instead of regedit.exe /s

[tschuegy]

Hi UEMdev

Is it possible to configure the way how UEM import the registry files when importing an uem archive? The standard behavior is to use regedit.exe /s. Our customer is thinking about to disable regedit.exe for normal user. I know, it is not really an security issue to allow them to the users, beacause UAC is active per default and normal users has no local admin right.

He would like to configure UEM, that it uses reg.exe import *.reg file...

Is it possible?

Best Regards

tschuegy

[DEMdev · Accepted solution]

Hi tschuegy,

The UEM agent contains some logic to switch to REG.EXE IMPORT based on some UAC scenarios, but there's no way to affect that logic via UEM configuration.

[tschuegy]

Hi UEMdev​

Thats exactly the problem. An uac prompt is displayed when uem tries to import an archive. Can you please explain me what logic it as in the agent? Our customer is implemmenting GPO hardening policies whits uac settings 🙂

Did you know what GPO settings brohibit uem to import the reg file?

[DEMdev]

Hi tschuegy,

Hmmm... That's weird. Can you provide a UEM log file and a description of what exactly the customer has configured, hardening-wise?

[tschuegy]

Sorry for my late response...

It was a false positive 🙂

After i had seed the customers environment....all works like a charme.

Sorry, thanks,

tschuegy

[DEMdev]

Thank you for reporting back, tschuegy, happy to hear it's working!