[GH-ISSUE #1452] Background registry editor #2850

Closed
opened 2026-03-14 05:41:41 +03:00 by kerem · 20 comments
Owner

Originally created by @seckinsozan on GitHub (Mar 13, 2023).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1452

It would be very good to have a background registry editor for Windows clients.

Originally created by @seckinsozan on GitHub (Mar 13, 2023). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1452 It would be very good to have a background registry editor for Windows clients.
kerem 2026-03-14 05:41:41 +03:00
Author
Owner

@bbrendon commented on GitHub (Mar 14, 2023):

@secbirkin Windows comes with two. reg.exe and in PowerShell New-ItemProperty

<!-- gh-comment-id:1467338759 --> @bbrendon commented on GitHub (Mar 14, 2023): @secbirkin Windows comes with two. reg.exe and in PowerShell New-ItemProperty
Author
Owner

@wh1te909 commented on GitHub (Mar 14, 2023):

i think he means a web UI built into trmm, which is planned. we already have the interface for the file browser for reporting, same one will be used for registry editor

<!-- gh-comment-id:1468654787 --> @wh1te909 commented on GitHub (Mar 14, 2023): i think he means a web UI built into trmm, which is planned. we already have the interface for the file browser for reporting, same one will be used for registry editor
Author
Owner

@seckinsozan commented on GitHub (Mar 14, 2023):

@wh1te909 yes, that's what I meant. A web GUI for registry editor like file browser. Thanks.

<!-- gh-comment-id:1468713565 --> @seckinsozan commented on GitHub (Mar 14, 2023): @wh1te909 yes, that's what I meant. A web GUI for registry editor like file browser. Thanks.
Author
Owner

@wh1te909 commented on GitHub (Oct 13, 2025):

here's a preview of what we're working on:

https://github.com/user-attachments/assets/a469d81a-0143-4755-b098-530ddfce6c94

<!-- gh-comment-id:3399114651 --> @wh1te909 commented on GitHub (Oct 13, 2025): here's a preview of what we're working on: https://github.com/user-attachments/assets/a469d81a-0143-4755-b098-530ddfce6c94
Author
Owner

@P6g9YHK6 commented on GitHub (Oct 15, 2025):

good 🔥🔥

is the bar at the top usable to browse to folder directly ?

also an import button would be nice for these .reg file

<!-- gh-comment-id:3404914875 --> @P6g9YHK6 commented on GitHub (Oct 15, 2025): good 🔥🔥 is the bar at the top usable to browse to folder directly ? also an import button would be nice for these .reg file
Author
Owner

@Acwildweb commented on GitHub (Oct 31, 2025):

Awesome! Hurry!!!

<!-- gh-comment-id:3472737856 --> @Acwildweb commented on GitHub (Oct 31, 2025): Awesome! Hurry!!!
Author
Owner

@wh1te909 commented on GitHub (Nov 3, 2025):

path bar at top is now editable and can copy paste:

https://github.com/user-attachments/assets/582b5ea8-88e0-4336-9639-2dc6795a42ab

<!-- gh-comment-id:3481795744 --> @wh1te909 commented on GitHub (Nov 3, 2025): path bar at top is now editable and can copy paste: https://github.com/user-attachments/assets/582b5ea8-88e0-4336-9639-2dc6795a42ab
Author
Owner

@P6g9YHK6 commented on GitHub (Nov 3, 2025):

👏🏻 now only .reg export / import and then i would never need to put my fingers inside regedit.exe ever again ❤️

<!-- gh-comment-id:3482691484 --> @P6g9YHK6 commented on GitHub (Nov 3, 2025): 👏🏻 now only .reg export / import and then i would never need to put my fingers inside regedit.exe ever again ❤️
Author
Owner

@wh1te909 commented on GitHub (Jan 14, 2026):

released in v1.4.0

<!-- gh-comment-id:3751968853 --> @wh1te909 commented on GitHub (Jan 14, 2026): released in v1.4.0
Author
Owner

@Acwildweb commented on GitHub (Jan 15, 2026):

Hi, I’ve been testing the new registry editor, but I've noticed some mismatches between the keys shown here and those in regedit.exe. Specifically, some of my software’s keys are missing, even though I'm looking at the exact same path. It seems like I'm seeing fewer entries overall. Could you explain why this is happening and how I can view the full set of keys? Thanks for your help and your time.

<!-- gh-comment-id:3754027682 --> @Acwildweb commented on GitHub (Jan 15, 2026): Hi, I’ve been testing the new registry editor, but I've noticed some mismatches between the keys shown here and those in regedit.exe. Specifically, some of my software’s keys are missing, even though I'm looking at the exact same path. It seems like I'm seeing fewer entries overall. Could you explain why this is happening and how I can view the full set of keys? Thanks for your help and your time.
Author
Owner

@wh1te909 commented on GitHub (Jan 15, 2026):

@Acwildweb can you provide steps for us to reproduce, which software, windows version etc

<!-- gh-comment-id:3756662916 --> @wh1te909 commented on GitHub (Jan 15, 2026): @Acwildweb can you provide steps for us to reproduce, which software, windows version etc
Author
Owner

@Acwildweb commented on GitHub (Jan 15, 2026):

Image Image As you can see on the two screenshot there are several differences about the remote machine issued here all i nfo requested: Name:Microsoft Windows 11 Pro|C:\Windows|\Device\Harddisk0\Partition3 Debug:false Locale:0410 OSType:18 Status:OK Caption:Microsoft Windows 11 Pro CodeSet:1252 Primary:true Version:10.0.26100
<!-- gh-comment-id:3756954013 --> @Acwildweb commented on GitHub (Jan 15, 2026): <img width="1791" height="758" alt="Image" src="https://github.com/user-attachments/assets/ab174f7f-d545-4daf-8cbd-f34f3bbabf87" /> <img width="5120" height="2636" alt="Image" src="https://github.com/user-attachments/assets/deebfdef-0d91-4e65-a866-7e18a452522c" /> As you can see on the two screenshot there are several differences about the remote machine issued here all i nfo requested: Name:Microsoft Windows 11 Pro|C:\Windows|\Device\Harddisk0\Partition3 Debug:false Locale:0410 OSType:18 Status:OK Caption:Microsoft Windows 11 Pro CodeSet:1252 Primary:true Version:10.0.26100
Author
Owner

@wh1te909 commented on GitHub (Jan 16, 2026):

that's just the default value, it's not an actual entry

<!-- gh-comment-id:3758081338 --> @wh1te909 commented on GitHub (Jan 16, 2026): that's just the default value, it's not an actual entry
Author
Owner

@Warming-nyit commented on GitHub (Jan 16, 2026):

  1. I have a test PC where it is possible to see TeamViewer entries through Windows Regedit.
    This is not possible through Tactical
Image Image
  1. Under HKEY_CURRENT_USER\Software, it looks like RegisteredApplications is missing in Tactical.
Image
  1. If you type the entry URL in lowercase, it causes an error.
Image
  1. If you type an abbreviation in the entry URL (for example HKLM), it causes an error.
Image
<!-- gh-comment-id:3758642654 --> @Warming-nyit commented on GitHub (Jan 16, 2026): 1. I have a test PC where it is possible to see TeamViewer entries through Windows Regedit. This is not possible through Tactical <img width="805" height="1217" alt="Image" src="https://github.com/user-attachments/assets/ab934704-be4f-461a-b590-afb9be0b7466" /> <img width="1292" height="910" alt="Image" src="https://github.com/user-attachments/assets/4c2e99e4-d9da-4b1d-b32c-ecbae104ee14" /> 2. Under HKEY_CURRENT_USER\Software\, it looks like RegisteredApplications is missing in Tactical. <img width="848" height="1056" alt="Image" src="https://github.com/user-attachments/assets/267e83b6-1647-46c1-8562-5a64e584ceae" /> 3. If you type the entry URL in lowercase, it causes an error. <img width="1262" height="114" alt="Image" src="https://github.com/user-attachments/assets/cc331897-d4fb-4175-acb3-d5ff4b5b2613" /> 4. If you type an abbreviation in the entry URL (for example HKLM), it causes an error. <img width="1190" height="104" alt="Image" src="https://github.com/user-attachments/assets/86f315d5-d020-4793-9b62-5a761d8e73e2" />
Author
Owner

@Acwildweb commented on GitHub (Jan 16, 2026):

that's just the default value, it's not an actual entry

Hey, sorry, I don't get it. What do you mean it's not an actual entry? Are you saying the program doesn't show the real registry entries but just random ones?

<!-- gh-comment-id:3759813059 --> @Acwildweb commented on GitHub (Jan 16, 2026): > that's just the default value, it's not an actual entry Hey, sorry, I don't get it. What do you mean it's not an actual entry? Are you saying the program doesn't show the real registry entries but just random ones?
Author
Owner

@silversword411 commented on GitHub (Jan 16, 2026):

I can confirm there are missing keys in TRMM from what's on the computer.

Image
<!-- gh-comment-id:3760278966 --> @silversword411 commented on GitHub (Jan 16, 2026): I can confirm there are missing keys in TRMM from what's on the computer. <img width="3266" height="1646" alt="Image" src="https://github.com/user-attachments/assets/6cd38975-3878-4fe2-9448-b65180424b51" />
Author
Owner

@wh1te909 commented on GitHub (Jan 29, 2026):

Regarding inconsistencies in HKEY_CURRENT_USER, this is expected behavior because the agent runs under the SYSTEM account, so when you browse HKEY_CURRENT_USER you’re seeing SYSTEM’s user hive, not the currently logged-in user’s registry.

<!-- gh-comment-id:3820731678 --> @wh1te909 commented on GitHub (Jan 29, 2026): Regarding inconsistencies in HKEY_CURRENT_USER, this is expected behavior because the agent runs under the SYSTEM account, so when you browse HKEY_CURRENT_USER you’re seeing SYSTEM’s user hive, not the currently logged-in user’s registry.
Author
Owner

@silversword411 commented on GitHub (Jan 29, 2026):

I should have known better, yeah that's HKCU. You'd have to use the /HKEY_USERS/whateverforauser to edit HKCU

<!-- gh-comment-id:3820748666 --> @silversword411 commented on GitHub (Jan 29, 2026): I should have known better, yeah that's HKCU. You'd have to use the `/HKEY_USERS/whateverforauser` to edit HKCU
Author
Owner

@Acwildweb commented on GitHub (Jan 31, 2026):

I'm sorry, but I still don't understand. Perhaps the English-to-Italian translation is not very efficient. Could you give me a practical example of how to view the registry keys of the computer I'm connected to?

<!-- gh-comment-id:3828664513 --> @Acwildweb commented on GitHub (Jan 31, 2026): I'm sorry, but I still don't understand. Perhaps the English-to-Italian translation is not very efficient. Could you give me a practical example of how to view the registry keys of the computer I'm connected to?
Author
Owner

@wh1te909 commented on GitHub (Feb 17, 2026):

@Warming-nyit we've identified the issue for your teamviewer problem, root cause was a software name can be very long and didn't fit in the buffer size, a fix will be in the next release

<!-- gh-comment-id:3916662171 --> @wh1te909 commented on GitHub (Feb 17, 2026): @Warming-nyit we've identified the issue for your teamviewer problem, root cause was a software name can be very long and didn't fit in the buffer size, a fix will be in the next release
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tacticalrmm#2850
No description provided.