HKCU Analysis

(imported topic written by jbwood9991)

I’d like to find any boxes with the IE setting “Integrated Windows Authentication” disabled. I would expect the following property relevance to return False if so.

exists value “EnableNegotiate” whose (“1” = it as string) of key “HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings” of native registry

However on a box where I know this is disabled (value data=0) the following property relevance results in True. The debugger on this same box does result in False. Why would that be?

(imported comment written by MattBoyd)

HKCU is tricky. Check out this thread, which should help you a lot:

(imported comment written by jbwood9991)

Thanks…that does help. I guess the success with the debugger was throwing me off.