Supposing that I have a remote machine on which I’m an admin, and I want to query some values in the windows registry in HKEY_CURRENT_USER for a given user on a given machine. (The user may be logged in or off.)
Is it possible to query HKCU like this? And, if so, how?
You need to find the user’s SID (Security Identifier) and query
HKEY_USERS\{SID}