andrewek

Disable Remote Registry Service

Recommended Posts

Hello all!

It is recommended that you completely disable the Windows Remote Registry service for security reasons.

I manually switch the settings to "Disabled"

However, at each next start of the computer, the Remote Registry service returns to its default state again, that is, the start is "Automatic"

How to make sure that the service does not translate back into autorun?

It’s written in the settings that the service is started by the trigger.

How to find and disable this trigger?

p.s. Sorry, the text on the screenshots in Russian)

 

 

2019-12-17 20_28_54-Службы.jpg
Download Image

2019-12-17 20_29_33-Свойства_ Удаленный реестр (Локальный компьютер).jpg
Download Image

Share this post


Link to post
Share on other sites

Why would you want to disable it in the first place? It's a legitimate windows service. Unless you are a system admin just keep your windows services settings at the default level to ensure your OS functions properly.

Share this post


Link to post
Share on other sites
That's right, it's a legitimate Windows service!
But she can allow remote control of my registry! from someone else's computer!
Is not it?
 
In addition, I assume that many security recommendations (at least Russian-language sources) strongly recommend that you disable this service among some others.
The computer at the same time works absolutely fine, I assure you!😉

Share this post


Link to post
Share on other sites
Of course, I’m not a security specialist!
Therefore, I ask here on the forum!
However, for almost 10 years, my Windows 7 worked specifically with the disabled remote registry service.
 
However, on Windows 10 (1909), I am unable to disable it.
Rather, the service starts automatically by default again the next time the computer boots ...

Share this post


Link to post
Share on other sites
Quote

But she can allow remote control of my registry! from someone else's computer!

If only the service is enabled and windows otherwise is configured as default there is no way that this service running can allow anyone to connect to your computer's registry remotely. As far as I know you can only do that using this service if the computers are on the same network and visible to each other. If your computer is accessible to the entire internet that way you have much bigger problems than a possibility that an attacker might access your registry (they could get to all your files). :)

Share this post


Link to post
Share on other sites

I can't comment on recommendations given by different security products since I don't know what their reasoning behind it is. You'll have to ask them about it.

Share this post


Link to post
Share on other sites

There are programs that require that the Remote Registry Service to be enabled as they make use of it.  I never recommend that a service be disabled, if it is enabled by default.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.