I know UEM can only HKCU hive but I had hoped that the following would work:
1. Created a PS script that changes and deletes a couple of HKLM\Software\Classes keys and converted it to .EXE using PS2EXE.
2. Put the .exe in a fileshare and set Privilege Elevation (path based) to elevate the .exe
3. I also used privilege elevation to elevate C:\windows\regedit.exe
4. Created a shortcut in the Startup folder pointing to the .exe so it runs at logon.
Of course it failed, and the error was 'Registry area cannot be written to' or something along those lines.
Presumably this is UAC on the desktop, or UEM is executing the script, but not even priv elevation doesn't let it write to HKLM.
Has anybody got a way around this? I really need these HKLM keys to be added at startup otherwise we're changing a master image for 500+ people.
Please help or put me out of my misery.
Dave