Allow functionality for updating HKCU policy registry keys in user context with Compliance Settings
Currently, the default permissions on HKCU policy keys result in an access denied error when trying to remediate these keys in the user context. The workaround of running a script in the system context and updating HKU[SID] keys adds considerable complexity to managing these keys with Compliance Settings. It would be convenient to have the functionality of being able to update these keys in the user context, much like the current functionality in Group Policy Preferences.
Michael Smith commented
It makes no sense to me that you can select HKCU as the Hive Name in a Configuration Item, but because SCCM runs as the System Account, it can't access the HKCU hive.
Why make this an option if it Cant Work?
Please fix this. This feature needs to work.
Boris Tarankov commented
It gets even more tricky when you want to set something in HKEY_CURRENT_USER\Software\Policies\