how to determine that user or operating system has changed registry key?

Question

I have a small app which monitors registry key changing and it works fine. But i wanna know when registry change, registry has changed by user or operating system? Can i do that?

Answer 1

You can use the WMI RegistryKeyChanged event. Check the MSDN documentation here: RegistryKeyChangeEvent. For more registry change monitoring check the WMI Registry Event Classes.