Windows 10: Found 'sc.exe' in BAM User Settings in Registry- Confused as to Why It Has Appearer

to preface, I know what BAM is and I know roughly was sc.exe is related to/uses the Service Control Manager to do things with Windows ServicesI like to frequently check this pathway;HKLM > System > ControlSet001 > Services > bam > State > UserSettings > my user SIDI noticed that in the bam UserSettings, under my user SID, there's an entry for 'Device\HarddiskVolume whatever\Windows\System32\sc.exe'I don't believe this was here yesterday and I'm confused as to why it's appeared today; as I said, to my understanding sc.exe is related to Remote Procedure Call and Windows

:)

 

Current active users that are friends

The other reason I suggested this is that users can add characters to their username that are not alphanumeric (e.g. user*). This confuses things somewhat when looking at the list.

 

How to run an EXE which modifies user settings on registry

Hi All,

I have created an executable file which changes some of the settings on registry for the user. Given the scenario this is the only way we can make changes to the user files and registry. The EXE requires Admin privilege to make the appropriate changes. I.e.
Editing the registry, editing the files win C:\Windows path etc...

This is all well if you are a local admin to the machine and everything runs smoothly. But if the user who logged on is not a local admin then it would require run as administrator. However the problem is, if I run the EXE as an admin then it makes the changes
for the admin and not the user who initiated the run. How can I achieve this?

I tried to get the user SID following this thread and tried to make the changes to the logged on user. but no luck as the EXE runs it calls some powershell scripts and it makes the changes to the admin account.

Kindly let me know if there is a way to accomplish this.

Thanks.

 

User Account Confusions

Sorry. I thought I had covered all the points you make. I did originally arrange the text as you suggest but it jumbled together when I posted. I will edit my entry

I had stated that Administrator was missing from Registry but it obviously got lost in my copying or re-arranging

* is a note that mjcx2 was replaced by mjcx2.LAPTOPQUIG... in the registry ie. mjcx2 appears in Windows PowerShell but not in the registry.

i.e. if you click on Profile Image Path for plain mjcx2, resultant user name is mjcx2.LAPTOPQUIG...

mjcx2LAPTOPQUIG... has no entry in Windows PowerShell list.

I entered granny counter as granny conter in error when I first opened the User Account. I amended the error. I was drawing attention to the fact that the misspelling remains in the registry entry. In Windows 10 directory it is correctly entered as granny counter.

Sorry if I caused confusion. I am very grateful for your time.