Parse_reg.c functions/structures

[Tim Potter]

On Tue, Jan 27, 2004 at 04:47:47PM -0800, David Cheney wrote:

> I realize that the rpcclient winreg code has not been touched for a
> couple years, but if someone might recall some information  I would
> appreciate it.
> 
> Is there any documentation regarding the winreg rpc structures? I gather
> that the parsing functions in parse_reg.c are not comprehensive, but
> there doesn't seem to be much in the way of descriptive comments or
> development guides on this subject.

You can try looking at the winreg.idl in Samba 4 for more up to date
information.  I wrote it from looking at Luke Leighton's DCERPC book
and staring at debug level 10 traces.

> Failing that, does anyone know of a windows utility that will do remote
> registry queries with authentication? Regedit seems to be able to
> connect to foreign hives but doesn't let you use a username/passwd to do
> so.

As you have found out REGEDT32.EXE will do authentication but only using 
the currently logged in user.  You might be able to write some win32 code 
to connect as a different user.


Tim.