我试图阻止注册表被系统更改。当Windows 10更新推送时，它将90％的注册表Hive数据设置回Factory Default。修补后修复很烦人。问题是系统正在创建破坏配置的某些键下的子键。我试图用以下方法锁定从系统编写子密钥的能力：
//Sample Key : HKLM\Key1\Key2 (Key1 is the Key in question)
• Took Ownership (owner = localhost\administrators)
• Disabled Inheritance
//Security Config (Allow)
ALL APPLICATION PACKAGES = Read
CREATOR OWNER = Special
SYSTEM = Read
ADMINISTRATORS = Read
USERS = Read
• All Subkeys are mirrored through the GUI
//Notes
I've done this with several different attempts, but after patching is complete, the Windows is back to factory. I noticed TrustedInstaller is not on the list, but this should deny that account correct?
Thanks in advance for any help. :)