Detect Machine rebooted in limited user mode

[Ken]

I detect machine being rebooted by checking a value I set in this
registry loctation.

HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce

I recently realise that value doesnt get reset with limited user. How
should I do this?

 

[Doug Knox MS-MVP]

Set it somewhere else, where a Limited user does have access. Or adjust the permissions on the RunOnce key.

 

[Roger Abell [MVP]]

As Doug stated:
Set it somewhere else, where a Limited user does have access.

Adjusting the permissions on this key has significant security
implications, so it is best to set the value in the proper place,
where a limited account has needed permissions.

 

[retgbiyopl.wredtryguj]

-----Original Message-----
Set it somewhere else, where a Limited user does have

access. Or adjust the permissions on the RunOnce key.