This article will show you how you can disallow processing of Run and RunOnce registry entries. This article applies to Windows Server 2008 Server Core Edition only!
By default, when you install Server Core, it is configured to process the Run and RunOnce registry entries during the log on.
You can prevent this behaviour by removing the part of the full command configured at following registry location:
Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Entry Name: Shell
Value: cmd.exe /c “cd /d “%USERPROFILE%” & start cmd.exe /k runonce.exe /AlternateShellStartup”
You need to remove “/k runonce.exe /AleternateShellStartup” from the above value and then restart the system for the changes to take affect.
About Nirmal Sharma
Nirmal is a Microsoft MVP in Directory Services and working as a Technical Architect/Consultant. He has been involved in Microsoft Technologies since 1994 and followed the progression of Microsoft Operating Systems and software. He is specialized in Directory Services, Microsoft Clustering, SQL, MOM, Exchange and Citrix. In his spare time, he likes to help others and write "internal" technical articles, white papers and tips on various Microsoft technologies. You can contact him at nirmal_sharma@mvps.org.
Article not looking right or info is missing? Let us know so that we can fix it: .
