[ros-kernel] Re: RtlQueryRegistryValues() in WIN32K

[Thomas Weidenmueller]

Martin Fuchs wrote:

>I don't know either. This is what I know:
>You can access HKEY_CURRENT_USER from the SYSTEM account.
>  
>
Hm I have no idea, i hope this is NT's behavior...

>PaintDesktop() is normally called from explorer, this runs in the logged
>on user context - so this should be no problem.
>  
>
Well, it's only called from explorer if explorer is running. Otherwise 
the real desktop window procedure which runs in it's own thread in CSRSS 
calls it. It's no problem for explorer but it could be a problem if it's 
CSRSS who calls it, again I don't know at the moment.

Regards
Thomas