question

JamesSilver-0098 avatar image
0 Votes"
JamesSilver-0098 asked CarlFan-MSFT answered

Why would the Registry Editor opened in a very specific branch?

I was reading about the printnightmare stuff and I went ahead to check the registry to make sure everything was good. When I typed the regedit command it opened in Computer\HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\CTF\Assemblies but I have never used the editor on this machine. That looks odd to me. Should I do something else? I'm already concern.

windows-10-security
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered JamesSilver-0098 commented

Generally goes to last open location, nothing to worry about, collapse the branches, navigate to Computer and next open should be at top level.

113443-image.png




--please don't forget to upvote and Accept as answer if the reply is helpful--









image.png (39.8 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Ok but that’s the thing, I’ve never used the editor and it opened in a very specific location. Now you said it opens at the last brach navigated. How it got there in the first place?

0 Votes 0 ·
Castorix31 avatar image
0 Votes"
Castorix31 answered

The last key is stored at :
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit
LastKey
So an application could have set this value.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CarlFan-MSFT avatar image
0 Votes"
CarlFan-MSFT answered

Hi,
When you start Regedit, it automatically opens the last key that was viewed. (Registry Editor in Windows XP saves the last viewed registry key in a separate location).
And this registry is related to your system IME. So if you haven't change it, I consider some related application, command or script may produced the same effect.
Hope this helps and please help to accept as Answer if the response is useful.
Best Regards,
Carl

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.