What are "impersonate" keys

Giganews Newsgroups
Subject: What are "impersonate" keys
Posted by:  SueInCincy (SueInCin…@discussions.microsoft.com)
Date: Thu, 19 Apr 2007

I have an Averatec C3500 Tablet XP Pro computer that has a new hard drive and
motherboard. It hasn't been on the Internet. I have installed Norton Internet
Security from disk, and MSI Installer installer update (downloaded to another
computer and installed from disk) that was necessary for that installation.

Can anyone educate me as to the appearance of these keys in files called
HIVESFT.INF and HIVESYS.INF?  Thanks.

From Hivesft.inf

HKLM,"SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Notify\cscdll","Impersonate",0x00010001,0

HKLM,"SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Notify\ScCertProp","Impersonate",0x00010001,1

HKLM,"SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Notify\SensLogn","Impersonate",0x00010003,1

HKLM,"SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Notify\wlballoon","Impersonate",0x00010001,1

From HiveSys.inf

HKLM,"SYSTEM\CurrentControlSet\Control\Lsa",
"ImpersonatePrivilegeUpgradeToolHasRun", 0x00010003, 1

Thanks again.

Replies