do you know an xp trick? post it here

[egghead]

ok i think this could be fun
i'm sure we could get five tricks here in a short while

post anything that you feel is helpful

i'll start


click on the start button
select run
type .
press enter

did you see where that takes you?

pretty cool if you want to do some housekeeping

cheers
egghead

[phishhead]

axcel216 (http://members.aol.com/axcel216/axcel216.htm) this guy is the guru of tips and tweaks he started my addiction to pc tweaking yrs ago....all flavors of windows and dos.

[egghead]

Window Refresh - Automatically

Start/Run/Regedit
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update. Value Name: UpdateMode, Data Type: REG_DWORD (DWORD Value), Value Data: default = 1. Create a new DWORD value, or modify the existing value, named "UpdateMode" and set it to equal "0" for faster updates. Restart Windows for the change to take effect.



egghead

[egghead]

Windows Key - Commands

Windows: Display the Start menu
Windows + D: Minimize or restore all windows
Windows + E: Display Windows Explorer
Windows + F: Display Search for files
Windows + Ctrl + F: Display Search for computer
Windows + F1: Display Help and Support Center
Windows + R: Display Run dialog box
Windows + break: Display System Properties dialog box
Windows + shift + M: Undo minimize all windows
Windows + L: Lock the workstation
Windows + U: Open Utility Manager

egghead

[egghead]

Zip Folders - To disable ZIP files being shown as folders

Click Start/Run, enter the string below, and click OK: regsvr32 /u zipfldr.dll

You should receive a dialog that says "DllUnregisterServer in zipfldr.dll succeeded." To restore the default behavior, simply do the same with this string: regsvr32 zipfldr.dll


CD-Rom Burning - Allow limited users access to CD Burning:

To allow Limited User's to burn CD's, click Start, Run and enter REGEDIT. Go to:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Look in the right pane for AllocateDASD and double click the entry. Set the value to 2.

On PRO, this is exposed in Local Security Policy under Security Settings\Local Policies\Security Options
"Devices: Allowed to format and eject removable media"

For XP Pro, you can do this by clicking Start, Run and entering SECPOL.MSC.

Go to Local Policies, Security Options, look in the right pane for Devices: Allowed to Format and eject removable media. Set this option to Administrators and Interactive Users.




Non-Responding Programs/Apps at Shutdown

You can tell Windows XP to automatically close all non responding windows. Go to Start/Run/Regedit

HKEY_USERS\.DEFAULT\Control Panel\Desktop and set the value to 1.

[egghead]

Services - Disable


To disable unneeded startup services for a safer, faster XP, use the "Services" Admin Tool (Control Panel/Administrative Tools/Services). If you are a single user of a non-networked machine, you can disable the following items, with no ill effect.

Alerter
Clipbook
Computer Browser
Fast User Switching
Human Interface Access Devices
Indexing Service (Slows the hard drive down)
Messenger
Net Logon (unnecessary unless networked on a Domain)
Netmeeting Remote Desktop Sharing (disabled for extra security)
Remote Desktop Help Session Manager (disabled for extra security)
Remote Procedure Call Locator
Remote Registry (disabled for extra security)
Routing & Remote Access (disabled for extra security)
Server
SSDP Discovery Service ("Universal P'n'P", & leaves TCP Port 5000 wide open)
TCP/IP NetBIOS Helper
Telnet (disabled for extra security)
Universal Plug and Play Device Host
Upload Manager
Windows Time
Wireless Zero Configuration (for wireless networks)
Workstation

[egghead]

use the hd as the xp cd

Copy the contents of the I386 folder from your XP CD to your hard drive. Then go to Start/Run/Regedit. Go to:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion

In the right pane, change SourcePath to reflect your settings.




The complete list of startup locations in Windows

Feb. 24, 2002


By Al Fasoldt
Copyright © 2002, Al Fasoldt
Copyright © 2002, The Post-Standard

Most programs on a Windows PC run only when you want them to. But there are others that always start up with Windows, whether you want them to or not. Getting rid of such unwelcome guests can be a major project if you don't have help.

I've written about this problem before (search using the word "startup" -- without quotes -- at the Technofile site, twcny.rr.com/technofile) and have talked about it on radio and TV. But I'd never done what many of you have asked -- provided a full explanation of all the ways Windows uses to launch programs automatically when it starts up.
You have your wish. Here is a complete list.

1. Start Up folder. Windows opens every item in the Start Menu's Start Up folder. This folder is prominent in the Programs folder of the Start Menu. Notice that I did not say that Windows "runs" every program that is represented in the Start Up folder. I said it "opens every item." There's an important difference.
Programs represented in the Start Up folder will run, of course. But you can have shortcuts in the Start Up folder that represent documents, not programs.
For example, if you put a Microsoft Word document in the Start Up folder, Word will run and automatically open that document at bootup; if you put a WAV file there, your audio software will play the music at bootup, and if you put a Web-page Favorite there, Internet Explorer (or your own choice of a browser) will run and open that Web page for you when the computer starts up. (The examples cited here could just as easily be shortcuts to a WAV file or a Word document, and so on.)

2. REGISTRY. Windows executes all instructions in the "Run" section of the Windows Registry. Items in the "Run" section (and in other parts of the Registry listed below) can be programs or files that programs open (documents), as explained in No. 1 above.

3. REGISTRY. Windows executes all instructions in the "RunServices" section of the Registry.

4. REGISTRY. Windows executes all instructions in the "RunOnce" part of the Registry.

5. REGISTRY. Windows executes instructions in the "RunServicesOnce" section of the Registry. (Windows uses the two "RunOnce" sections to run programs a single time only, usually on the next bootup after a program installation.)

6. BATCH FILE. Windows executes all instructions in the Winstart batch file, located in the Windows folder. (This file is unknown to nearly all Windows users and most Windows experts, and might not exist on your system. You can easily create it, however. Note that some versions of Windows call the Windows folder the "WinNT" folder.) The full filename is WINSTART.BAT.

7. INITIALIZATION FILE. Windows executes instructions in the "RUN=" line in the WIN.INI file, located in the Windows (or WinNT) folder.

8. INITIALIZATION FILE. Windows executes instructions in the "LOAD=" line in the WIN.INI file, located in the Windows (or WinNT) folder.

9. RELAUNCHING. Windows reruns programs that were running when Windows shut down. Windows cannot do this with most non-Microsoft programs, but it will do it easily with Internet Explorer and with Windows Explorer, the file-and-folder manager built into Windows. If you have Internet Explorer open when you shut Windows down, Windows will reopen IE with the same page open when you boot up again. (If this does not happen on your Windows PC, someone has turned that feature off. Use Tweak UI, the free Microsoft Windows user interface manager, to reactivate "Remember Explorer settings," or whatever it is called in your version of Windows.)

10. TASK SCHEDULER. Windows executes autorun instructions in the Windows Task Scheduler (or any other scheduler that supplements or replaces the Task Scheduler). The Task Scheduler is an official part of all Windows versions except the first version of Windows 95, but is included in Windows 95 if the Microsoft Plus Pack was installed.

11. SECONDARY INSTRUCTIONS. Programs that Windows launches at startup are free to launch separate programs on their own. Technically, these are not programs that Windows launches, but they are often indistinguishable from ordinary auto-running programs if they are launched right after their "parent" programs run.



egghead

[Reverend]

Neoseeker have posted a comprehensive Windows XP Tweaking Guide.
View the guide here (http://www.neoseeker.com/Articles/Hardware/Guides/winxptweak/) (7 pages)

thanks to warp2search

[MSNwar]

Originally posted by phishhead
axcel216 (http://members.aol.com/axcel216/axcel216.htm) this guy is the guru of tips and tweaks he started my addiction to pc tweaking yrs ago....all flavors of windows and dos.

I couldn't agree more! axcel216 is the best. Did you know he started out in the chat room Mac and PC? Also, a very nice person to chat with.

[egghead]

To Disable The Notification Area Balloon Tips



Click Start, click Run, type regedit, and then press ENTER.
Navigate to the following subkey:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Right-click the right pane, create a new DWORD value, and then name it EnableBalloonTips.
Double-click this new entry, and then give it a hexadecimal value of 0.
Quit Registry Editor. Log off Windows, and then log back on.
These steps disable all Notification Area balloon tips for this user. There is no way to disable balloon tips for specific programs only.



ReferencesWARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

[Big Booger]

Got this from Warp2search.net
works great!
BB

[phishhead]

here is a doc with alot of great tweaks...Many great members over at xp-erience put this one together...great job.

[Ramanuman]

Originally posted by phishhead
here is a doc with alot of great tweaks...Many great members over at xp-erience put this one together...great job.
Hi folks,
Unfortunately, phishhead posted a rather old version of the "tips & tweaks" document.

This one has more tweaks, less mistakes, and contains all the credits to who created/provided the tweaks, and who worked on the document

[Big Booger]

thanks a bunch for the updated document.. poor phishead... doesn't have the latest stuff...
BB

[egghead]

thanks Ramanuman:

and welcome to techzonez

your update is the thing that keeps the forum alive



cheers

egghead

[tons of fun]

Thanks all.........

[egghead]

Cabinet Files - Restore

From Start, Run, type "msconfig" without the quotes. Click the expand button lower right. You can then expand and extract to any location. Detailed version:

1. Click Start, and then click Run.
2. In the Open box, type "msconfig" (without the quotation marks), and then click OK.
3. Click Expand File.
4. In the "File to restore" box, type the name of the file that you want to restore.
5. In the "Restore from" box, type the path to the Windows XP .cab file from which you want to restore the file, or click
Browse From to locate the Windows XP .cab file.

NOTE: The Windows XP .cab files are stored in the I386 folder on the Windows XP compact disc (CD).

6. In the "Save file in" box, type the path to which you want the new file extracted, or click Browse To to locate the folder
that you want.
7. Click Expand.
8. In the System Configuration Utility dialog box, click OK. If you are prompted to restart the computer, click Restart.

[FastGame]

Start> Run> type in "iexpress" without the quotes.

Have fun :cool:

[lynchknot]

What's that FG?

[egghead]

A List of the Keyboard Shortcuts That Are Available in Windows XP


http://support.microsoft.com/default.aspx?scid=kb;en-us;Q301583

[Thor]

I don't know if this is any of the vast amout of documentation links presented here but perhaps it's not been run across lately.

When doing a search in XP (Start/Search or Winkey/F) it's a pain to then have to click on "All Files and Folders" which is what the majority search for. To change that so the All Files and Folders is already showing open Search, go to 'Change preferences'/Change files and folders search behavior and select Advanced/Ok. You will now not have to do that extra click.

[bobp]

Delete all those pesky files that just won't delete when Windows is running. Add delete on reboot to your context menu:

Open notepad, and copy/paste the text below. Save the file as whatever.reg
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\*\shell\Delete on reboot\command]
@="CMD /E:OFF /C REG ADD HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\Currentversion\\RunOnce /v \"Del %1 OnNextReboot\" /d ^\"cmd.exe /c DEL /F /Q \\\"%1\\\"\" /f\""

[HKEY_CLASSES_ROOT\*\shell\Open]

[HKEY_CLASSES_ROOT\Folder\shell\Delete on reboot\command]
@="CMD /E:OFF /C REG ADD HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\Currentversion\\RunOnce /v \"Del %1 OnNextReboot\" /d ^\"cmd.exe /c RD /S /Q \\\"%1\\\"\" /f\""


I got it from: here (http://forums.speedguide.net/showthread.php?t=172398)

[rik]

Can't get to any "secure" websites? Re-register all your .dlls without all the usual typing!!
Just open a command window, r-click and copy the entire following text:

regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll

Once those are all highlighted, r-click inside the command window and choose paste. Then you will see those .dll files being re-registered and you will have to click the "ok" buttons that popup. You should then be able to get to those secure websites.

[Jackpot]

Thanks a bunch Ramanuman for the dnload and everybody for their
imput in this thread..!

[lynchknot]

great, Rik and bob. Thanks!

Here's a post from Bold Fortune who is the author of Slimming down Windows XP (http://www.hollow-refuge.net/Bold/viewtopic.php?t=229) and Slimming down Windows XP parts 1-10 (http://hollow-refuge.net/Bold/viewforum.php?f=13&sid=f3fbcdacfa4e27fcee9d2fb690029b1f) I thought some of these my be useful to some of us.

Maybe Jan would like to pin this topic so we can handily reference it. I know I look for these types of posts on other sites because I learn so much from them.

I'll start this off with the Master Registry Tweaks File I made.[/b]

Windows Registry Editor Version 5.00

;Speed Up Network Browsing By Removing Network Scheduled Tasks
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\RemoteComputer\NameSpace\
{D6277990-4C6A-11CF-8D87-00AA0060F5BF}]

;Disable Image Toolbar in IE
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Enable_MyPics_Hoverbar"="no"

;Disable SP2 Security Center
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"FirstRunDisabled"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

;Removes dialog box pop up asking if you want to browse the web when trying an open a file with an unknown extension. It will now go directly to the Open With menu
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Policies\System]
"NoInternetOpenWith"=dword:00000001

;Open In New Window Right-Click Option
[HKEY_CLASSES_ROOT\InternetShortcut\shell\Open_with]
@="Open new"

[HKEY_CLASSES_ROOT\InternetShortcut\shell\Open_with\command]
@="rundll32.exe shdocvw.dll,OpenURL %1"

[HKEY_CLASSES_ROOT\InternetShortcut\shell\Open_with\ddeexec\
Application]
@="shdocvw"

[HKEY_CLASSES_ROOT\InternetShortcut\shell\Open_with\ddeexec\Topic]
@="System"

;Remove Throbber In IE
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
"LinksFolderName"="Links"
"ShowDiscussionButton"="Yes"
"Theater"=hex:0c,00,00,00,4c,00,00,00,74,00,00,00,18,00,00,00,1b,00,00,00,5c, 00,00,00,01,00,00,00,e0,00,00,00,a0,0f,00,00,05,00,00,00,22,00,00,00,26,00, 00,00,02,00,00,00,21,00,00,00,a0,0f,00,00,04,00,00,00,01,00,00,00,a0,0f,00, 00,03,00,00,00,08,00,00,00,00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"ITBarLayout"=hex:0c,00,00,00,4c,00,00,00,74,00,00,00,1a,00,00,00,10,00,00,00, 17,00,00,00,05,00,00,00,6a,00,00,00,26,00,00,00,01,00,00,00,e0,00,00,00,56, 00,00,00,02,00,00,00,29,00,00,00,57,00,00,00,03,00,00,00,a8,00,00,00,00,00, 00,00,04,00,00,00,09,00,00,00,55,01,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Explorer]
"ITBarLayout"=hex:0c,00,00,00,4c,00,00,00,74,00,00,00,1a,00,00,00,13,00,00,00, 33,00,00,00,05,00,00,00,6a,00,00,00,26,00,00,00,01,00,00,00,e1,00,00,00,df, 01,00,00,04,00,00,00,01,00,00,00,bd,00,00,00,02,00,00,00,20,00,00,00,8d,01, 00,00,03,00,00,00,09,00,00,00,b8,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"ITBarLayout"=hex:0c,00,00,00,4c,00,00,00,74,00,00,00,1a,00,00,00,10,00,00,00, 17,00,00,00,05,00,00,00,6a,00,00,00,26,00,00,00,01,00,00,00,e0,00,00,00,e0, 01,00,00,02,00,00,00,29,00,00,00,44,00,00,00,04,00,00,00,09,00,00,00,33,00, 00,00,03,00,00,00,09,00,00,00,42,00,00,00

;RemoveScriptDebugger
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Disable Script Debugger"="yes"

;Set IE Homepage
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"StartPage"="http://www.yahoo.com/"

;My Configured Start Menu
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Explorer\Advanced]
"ServerAdminUI"=dword:00000000
"Hidden"=dword:00000001
"ShowCompColor"=dword:00000001
"HideFileExt"=dword:00000000
"DontPrettyPath"=dword:00000000
"ShowInfoTip"=dword:00000001
"HideIcons"=dword:00000000
"MapNetDrvBtn"=dword:00000000
"WebView"=dword:00000000
"Filter"=dword:00000000
"SuperHidden"=dword:00000001
"SeparateProcess"=dword:00000000
"ListviewAlphaSelect"=dword:00000000
"ListviewShadow"=dword:00000001
"ListviewWatermark"=dword:00000000
"TaskbarAnimations"=dword:00000000
"StartMenuInit"=dword:00000002
"StartButtonBalloonTip"=dword:00000002
"NoNetCrawling"=dword:00000001
"FolderContentsInfoTip"=dword:00000001
"FriendlyTree"=dword:00000001
"WebViewBarricade"=dword:00000001
"DisableThumbnailCache"=dword:00000000
"ShowSuperHidden"=dword:00000001
"ClassicViewState"=dword:00000000
"PersistBrowsers"=dword:00000000
"TaskbarSizeMove"=dword:00000000
"TaskbarGlomming"=dword:00000000
"Start_LargeMFUIcons"=dword:00000000
"Start_MinMFU"=dword:00000000
"Start_ShowControlPanel"=dword:00000001
"Start_EnableDragDrop"=dword:00000001
"StartMenuFavorites"=dword:00000000
"Start_ShowHelp"=dword:00000000
"Start_ShowMyComputer"=dword:00000001
"Start_ShowMyDocs"=dword:00000000
"Start_ShowMyMusic"=dword:00000000
"Start_ShowMyPics"=dword:00000000
"Start_ShowPrinters"=dword:00000000
"Start_ShowRun"=dword:00000001
"Start_ScrollPrograms"=dword:00000000
"Start_ShowSearch"=dword:00000001
"Start_ShowSetProgramAccessAndDefaults"=dword:00000000
"Start_ShowRecentDocs"=dword:00000000
"Start_AutoCascade"=dword:00000001
"Start_NotifyNewApps"=dword:00000000
"Start_AdminToolsRoot"=dword:00000000
"StartMenuAdminTools"=dword:00000001
"EnableBalloonTips"=dword:00000000
"Start_ShowNetPlaces"=dword:00000000
"Start_ShowNetConn"=dword:00000000
"Start_AdminToolsTemp"=dword:00000001


32539

[lynchknot]

Part 2 because post was too long (don't know why since we have scrollbars now)

Windows Registry Editor Version 5.00

;Returns the Classic Search To Both Explorer and IE
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Explorer\CabinetState]

"Use Search Asst"="no"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Use Search Asst"="no"

;Show Hidden Devices In Device Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment]

"DEVMGR_SHOW_NONPRESENT_DEVICES"="1"

;Remove Shared Documents Folders
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\MyComputer\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee}]
@=""

;Disable Error Reporting, But notify me when critical errors occur
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting]
"DoReport"=dword:00000000

;Windows Media Player Tweaks
;Disable WMP MRU
[HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences]
"AddToMRU"=hex:00

;Disable SendUserGUID
[HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences]
"SendUserGUID"=hex:00

;DisableWMPUpdate
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer]
"DisableAutoUpdate"=dword:00000001
"EnableAutoUpgrade"="No"

;Disable WMP from running HTML scripts
[HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences]
"PlayerScriptCommandsEnabled"=dword:00000000

;Speed-up Access to AVI Media Files
[-HKEY_CLASSES_ROOT\CLSID\{87D62D94-71B3-4b9a-9489-5FE6850DC73E}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\
{87D62D94-71B3-4b9a-9489-5FE6850DC73E}\InProcServer32]

;Stop AVI Previews
[HKEY_CLASSES_ROOT\SystemFileAssociations\.avi\shellex\PropertyHandler]
@=-

[tarun]

Services - Disable


To disable unneeded startup services for a safer, faster XP, use the "Services" Admin Tool (Control Panel/Administrative Tools/Services). If you are a single user of a non-networked machine, you can disable the following items, with no ill effect.

Alerter
Clipbook
Computer Browser
Fast User Switching
Human Interface Access Devices
Indexing Service (Slows the hard drive down)
Messenger
Net Logon (unnecessary unless networked on a Domain)
Netmeeting Remote Desktop Sharing (disabled for extra security)
Remote Desktop Help Session Manager (disabled for extra security)
Remote Procedure Call Locator
Remote Registry (disabled for extra security)
Routing & Remote Access (disabled for extra security)
Server
SSDP Discovery Service ("Universal P'n'P", & leaves TCP Port 5000 wide open)
TCP/IP NetBIOS Helper
Telnet (disabled for extra security)
Universal Plug and Play Device Host
Upload Manager
Windows Time
Wireless Zero Configuration (for wireless networks)
Workstation

Would this make a significant difference to the memory used?

[hotmale]

It should because many of these are useless but running all the time. Having 25 processes instead of 40 can make a difference :)

[Kane]

In some troubleshooting scenarios, you might need to determine where in the registry the system or an application stores particular settings. Following steps describes how to find the location of Notepad's registry settings using regmon. You can download regmon here (http://www.sysinternals.com/utilities/regmon.html)

1. Have Notepad save a setting that you can easily search for in a Regmon trace. You can do this by running Notepad, setting the font to Times New Roman, and then exiting Notepad.

2. Run Regmon. Press Ctrl+L to open the highlighting filter dialog box and enter notepad.exe in the Include filter. Click OK.

3. Run Notepad again, and after it has launched stop Regmon's event capture by toggling Capture Events in the Regmon File menu.

4. Scroll to the top line of the resultant log and select it.

5. Press Ctrl+F to open a Find dialog box, and search for times new. Regmon should highlight a line like the one shown in the following graphic that represents Notepad reading the font value from the Registry.

6. Finally, double-click the highlighted line. Regmon will execute Regedit (if it's not already running) and cause it to navigate to and select the Notepad referenced registry value.

Have fun! :)