Chris,
From your example:
HKLM\...\sometype\...\open\...\SomeApp.exe
HKLM\...\sometype\...\print\...\SomeApp.exe /P
HKCU\...\sometype\...\open\...\Blah.exe
HKCU\...\sometype\...\view\...\Blee.exe
What's the ProgID assigned in each location ?
Example:
HKCU\Classes\.txt
(default) = ?
HKLM\Classes\.txt
(default) = ?
If the ProgID is defined (example, <SomeID>), is that present under HKCU or HKLM (or both?)
The resulting context-menu varies for each combination.
--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org
Chris Hi!
For the last part, the answer is:
"only actions of HKCU'TIFImage.Document"
O..K.. (ponders the significance of this)
Changes in File Types and File Association Features in Windows 2000 and Windows Server 2003:
Odd that it's specific to Server; doesn't XP Home and Pro work this
way too? For home users, locking out UI but facilitating programmatic
changes is essentially facilitating malware and blocking repair.
Those who say "but if malware code runs, all is lost!" aren't thinking
security in depth (accept that you will be penetrated, and don't stop
defending yourself when that happens), nor are they thinking of the
stand-alone consumer market.
This bit...
<paste>
HKEY_LOCAL_MACHINE\SOFTWARE\Classes registry key still contains global
file type associations that are global to all users of the computer.
However, entries that reside in the HKEY_CURRENT_USER\SOFTWARE\Classes
registry key take precedence in the event of a duplication.
</paste>
....isn't clear. From past experience (Folder / Drive action
inhereitence, merging of .REG) one might expect HKCU to overlay what
is in HKLM, e.g. something like this...
HKLM\...\sometype\...\open\...\SomeApp.exe
HKLM\...\sometype\...\print\...\SomeApp.exe /P
HKCU\...\sometype\...\open\...\Blah.exe
HKCU\...\sometype\...\view\...\Blee.exe
....to give this...
open (Blah.exe)
print (SomeApp.exe /P)
view (Blee.exe)
....rather than just this...
open (Blah.exe)
view (Blee.exe)
....but what you say implies the last.
So a hostile HKCU\...\.exe etc. would be quite difficult to fix?
------------ ----- ---- --- -- - - - -
The most accurate diagnostic instrument
in medicine is the Retrospectoscope