HTA Windows Registry Manipulation

[xenophobia]

Hi guys, Im doing a HTML application which able to set and read certain registry in a remote machine.

 

Everything is fine, Im able to read, write, and even delete with javascript. But when I run this piece of code in windows vista platform, the stupid UAC just block my script access to the registry. Which Im not able to write but only read.

 

I don't mind if the OS prompt for user's decision, which blackout the screen and ask whether allow or deny the access. But this time, it just do nothing but just throw an exception.

 

the code is as follow:

var wsh = new ActiveXObject("WScript.Shell");

try {
    var key = wsh.RegRead("HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\VisualEffects\\VisualFXSetting");

    alert("The value is : " + key);

    wsh.RegWrite("HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\VisualEffects\\VisualFXSetting", 2, "REG_DWORD");
} catch(ex) {
    alert("Error: " + ex);
}

[haku]

By no means do I have a lot of experience at this, but I think this is something you can't do, for security reasons. Browsers don't like it when a site tries to touch anything that isn't the browser.