C#无法访问HKEY_LOCAL_MACHINE指定注册表分支问题求助

问题背景 #

需求：通过关键词查询注册表并返回所有匹配的注册表地址。
问题：已在VS中以管理员权限运行程序，但无法访问HKEY_LOCAL_MACHINE\SOFTWARE\abc\test与HKEY_LOCAL_MACHINE\SYSTEM\test分支，报错信息：The requested registry access is not allowed。

相关代码如下：

public static DataTable SearchRegistry(string keyword)
{
    // List<string> matchedAddresses = new List<string>();
    DataTable dataTable = new DataTable("MyTable");
    dataTable.Columns.Add("Name", typeof(string));
    dataTable.Columns.Add("HOST", typeof(string));


    try
    {
        SearchRegistryKeys(Registry.ClassesRoot, keyword, "", dataTable);

        SearchRegistryKeys(Registry.CurrentUser, keyword, "", dataTable);

        SearchRegistryKeys(Registry.LocalMachine, keyword, "", dataTable);

        SearchRegistryKeys(Registry.Users, keyword, "", dataTable);

        SearchRegistryKeys(Registry.CurrentConfig, keyword, "", dataTable);

    }
    catch (Exception ex)
    {
        Console.WriteLine(ex.Message);
    }

    return dataTable;
}


public static void SearchRegistryKeys(RegistryKey key, string keyword, string currentPath, DataTable dataTable)
{
    string registername = key.Name;

        foreach (string subKeyName in key.GetSubKeyNames())
        {
            using (RegistryKey subKey = key.OpenSubKey(subKeyName))
            {
                if (subKey != null)
                {
                    if (subKeyName.ToLower().Contains(keyword) )
                    {
                       // dataTable.Rows.Add(subKeyName);
                        dataTable.Rows.Add($"{currentPath}\\{subKeyName}", "");
                    }

                    SearchRegistryKeys(subKey, keyword, $"{currentPath}\\{subKeyName}", dataTable);
                }
            }
        }
}

问题原因 #

1. 代码中调用OpenSubKey(subKeyName)时默认使用基础只读权限，但部分自定义或系统注册表分支的ACL（访问控制列表）会限制这种默认访问，需要显式声明更明确的读取权限。
2. 递归搜索过程中未捕获单分支的权限异常，一旦遇到无权限的分支会直接中断整个搜索流程。

解决方案 #

修改代码中OpenSubKey的调用参数，明确指定所需权限，并添加异常处理跳过无权限分支：

public static DataTable SearchRegistry(string keyword)
{
    DataTable dataTable = new DataTable("MyTable");
    dataTable.Columns.Add("Name", typeof(string));
    dataTable.Columns.Add("HOST", typeof(string));

    try
    {
        SearchRegistryKeys(Registry.ClassesRoot, keyword, "", dataTable);
        SearchRegistryKeys(Registry.CurrentUser, keyword, "", dataTable);
        SearchRegistryKeys(Registry.LocalMachine, keyword, "", dataTable);
        SearchRegistryKeys(Registry.Users, keyword, "", dataTable);
        SearchRegistryKeys(Registry.CurrentConfig, keyword, "", dataTable);
    }
    catch (Exception ex)
    {
        Console.WriteLine(ex.Message);
    }

    return dataTable;
}

public static void SearchRegistryKeys(RegistryKey key, string keyword, string currentPath, DataTable dataTable)
{
    try
    {
        foreach (string subKeyName in key.GetSubKeyNames())
        {
            // 显式声明读取子树和键的权限，覆盖默认权限限制
            using (RegistryKey subKey = key.OpenSubKey(subKeyName, RegistryKeyPermissionCheck.ReadSubTree, RegistryRights.ReadKey))
            {
                if (subKey != null)
                {
                    string fullPath = string.IsNullOrEmpty(currentPath) ? subKeyName : $"{currentPath}\\{subKeyName}";
                    if (subKeyName.ToLower().Contains(keyword))
                    {
                        dataTable.Rows.Add(fullPath, "");
                    }

                    // 单独捕获递归分支的权限异常，避免中断整个搜索
                    try
                    {
                        SearchRegistryKeys(subKey, keyword, fullPath, dataTable);
                    }
                    catch (UnauthorizedAccessException)
                    {
                        Console.WriteLine($"无权限访问分支: {fullPath}");
                    }
                }
            }
        }
    }
    catch (UnauthorizedAccessException)
    {
        Console.WriteLine($"无权限访问根分支: {key.Name}");
    }
}

修改说明 #

1. 权限声明：调用OpenSubKey时添加RegistryKeyPermissionCheck.ReadSubTree和RegistryRights.ReadKey参数，明确请求读取整个子树的权限，突破默认权限限制。
2. 异常隔离：在递归调用和外层循环中单独捕获UnauthorizedAccessException，单个无权限分支只会输出提示，不会中断整个搜索流程。
3. 路径优化：修正了路径拼接逻辑，避免生成开头带多余反斜杠的注册表地址。

额外注意 #

如果是64位系统，需确保程序编译目标平台与目标注册表分支匹配：

• 要访问64位的HKEY_LOCAL_MACHINE\SOFTWARE分支，需将项目设置为x64或Any CPU并取消勾选「首选32位」选项。

内容的提问来源于stack exchange，提问作者gong go