RegFromApp is a freeware utility from NirSoft that allows you monitor writes to the Registry from a specific process. This is more fine-grain than SysInternals RegMon making it a great complement, but not a replacement. You could use RegFromApp to monitor an installation process or an executable that you’re launching for the first time. I anticipate this will greatly help with troubleshooting permissions problems or other faults with settings not sticking.
RegFromApp can monitor these changes and then create a .REG script so that you could add these values to other computers or other user’s profiles. Combining this tool with the Unregistry app that I covered last week, you could create a useful combination of tools. Using RegFromApp to monitor a process and create a registry script (.REG file), you can then use Unregistry to uninstall those values in case you need to take an application to a previous state.
To start, you can launch RegFromApp and choose a running process to start watching for Registry writes.
Alternatively, inside of RegFromApp, you can choose the Start New Process button which will prompt you to launch an executable and begin monitoring at a time point you specify.
The changes can be displayed as they are recorded and can then be saved as the .REG script. You can also use RegFromApp to show the original values of the registry key before they were changed by the process you’re monitoring.
RegFromApp is a stand-alone executable at 33KB that does not require installation and comes in a 32-bit and 64-bit variety. It has its own command-line parameters that allows you to do everything without the GUI if you want to work it into a batch script.
You can download RegFromApp, see more screenshots, and find more details about the command-line parameters at the NirSoft site: http://www.nirsoft.net/utils/reg_file_from_application.html