Python模塊 _winreg操作注冊表

用python操作修改windows注冊表，顯然要比用C或者C++簡單。

主要參考資料：官方文檔：https://docs.python.org/zh-cn/3/library/winreg.html

通過python操作注冊表主要有兩種方式，一種是通過python的內置模塊 _winreg，另一種方式就是 Win32 Extension For Python的win32api模塊。這里主要簡單看看用內置模塊 _winreg如何操作注冊表。

1.讀取

讀取用的方法是OpenKey方法：打開特定的key

_winreg.OpenKey(key,sub_key,res=0,sam=KEY_READ)

例子：此例子是顯示了本機網絡配置的一些注冊表項

#!/usr/bin/env python
#coding=utf-8
import _winreg 
key = _winreg.OpenKey(_winreg.HKEY_LOCAL_MACHINE,r"SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{0E184877-D910-4877-B 4C2-04F487B6DBB7}")
#獲取該鍵的所有鍵值，遍歷枚舉
try:
 i=0
 while 1:
  #EnumValue方法用來枚舉鍵值，EnumKey用來枚舉子鍵
  name,value,type = _winreg.EnumValue(key,i)
  print repr(name),value,type
  i+=1
except WindowsError:
 print  
#假如知道鍵名，也可以直接取值
value,type = _winreg.QueryValueEx(key,"DhcpDefaultGateway")
print "默認網關地址----",value,type

運行的結果如下：

'UseZeroBroadcast' 0 4

'EnableDeadGWDetect' 1 4

'EnableDHCP' 1 4

'IPAddress' [u'0.0.0.0'] 7

'SubnetMask' [u'0.0.0.0'] 7

'DefaultGateway' [] 7

'DefaultGatewayMetric' [] 7

'NameServer' 10.0.0.10 1

'Domain' 1

'RegistrationEnabled' 1 4

'RegisterAdapterName' 0 4

'TCPAllowedPorts' [u'0'] 7

'UDPAllowedPorts' [u'0'] 7

'RawIPAllowedProtocols' [u'0'] 7

'NTEContextList' [u'0x00000004'] 7

'DhcpClassIdBin' None 3

'DhcpServer' 10.104.4.1 1

'Lease' 907200 4

'LeaseObtainedTime' 1264122113 4

'T1' 1264575713 4

'T2' 1264915913 4

'LeaseTerminatesTime' 1265029313 4

'IPAutoconfigurationAddress' 0.0.0.0 1

'IPAutoconfigurationMask' 255.255.0.0 1

'IPAutoconfigurationSeed' 0 4

'AddressType' 0 4

'IsServerNapAware' 0 4

'DhcpIPAddress' 10.104.5.15 1

'DhcpSubnetMask' 255.255.254.0 1

'DhcpRetryTime' 453598 4

'DhcpRetryStatus' 0 4

'DhcpNameServer' 10.0.0.10 1

'DhcpDefaultGateway' [u'10.104.4.1'] 7

'DhcpSubnetMaskOpt' [u'255.255.254.0'] 7

默認網關地址---- [u'10.104.4.1'] 7

2.創建 修改注冊表

創建key：_winreg.CreateKey(key,sub_key)

刪除key: _winreg.DeleteKey(key,sub_key)

刪除鍵值： _winreg.DeleteValue(key,value)

給新建的key賦值： _winreg.SetValue(key,sub_key,type,value)

例子：

#!/usr/bin/env python
#coding=utf-8
import _winreg
 
key=_winreg.OpenKey(_winreg.HKEY_CURRENT_USER,r"Software\Microsoft\Windows\CurrentVersion\Explorer")
#刪除鍵
_winreg.DeleteKey(key, "Advanced")
#刪除鍵值
_winreg.DeleteValue(key, "IconUnderline")
#創建新的
newKey = _winreg.CreateKey(key,"MyNewkey")
 #給新創建的鍵添加鍵值
_winreg.SetValue(newKey,"ValueName",0,"ValueContent")

在python3以上，_winreg已經變成了winreg

 winreg --- Windows 注冊表訪問

這些函數將 Windows 注冊表 API 暴露給 Python。為了確保即便程序員忽略了顯式關閉句柄，該句柄依然能夠正確關閉，它使用了一個 handle 對象 而不是整數來作為注冊表句柄。

在 3.3 版更改: 該模塊中的幾個函數被用于引發 WindowsError，該異常現在是 OSError 的別名。

函數

該模塊提供了下列函數：

winreg.CloseKey(hkey)

關閉之前打開的注冊表鍵。參數 hkey 指之前打開的鍵。

注解

如果沒有使用該方法關閉 hkey (或者通過 hkey.Close())，在對象 hkey 被 Python 銷毀時會將其關閉。

winreg.ConnectRegistry(computer_name, key)

建立到另一臺計算上上的預定義注冊表句柄的連接，并返回一個 handle 對象.
computer_name 是遠程計算機的名稱，以 r"\\computername" 的形式。如果是 None ，將會使用本地計算機。
key 是所連接到的預定義句柄。
返回值是所開打鍵的句柄。如果函數失敗，則引發一個 OSError 異常。
引發一個 審計事件 winreg.ConnectRegistry，附帶參數 computer_name, key。

winreg.CreateKey(key, sub_key)

創建或打開特定的鍵，返回一個 handle 對象。
key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。
sub_key 是用于命名該方法所打開或創建的鍵的字符串。
如果 key 是預定義鍵之一，sub_key 可能會是 None。該情況下，返回的句柄就是傳入函數的句柄。
如果鍵已經存在，則該函數打開已經存在的該鍵。
返回值是所開打鍵的句柄。如果函數失敗，則引發一個 OSError 異常。
引發一個 審計事件 winreg.CreateKey，附帶參數 key, sub_key, access。
引發一個 審計事件 winreg.OpenKey/result，附帶參數 key。

winreg.CreateKeyEx(key, sub_key, reserved=0, access=KEY_WRITE)

創建或打開特定的鍵，返回一個 handle 對象。
key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。
sub_key 是用于命名該方法所打開或創建的鍵的字符串。
reserved 是一個保留的證書，必須是零。默認值為零。
access 為一個整數，用于給鍵的預期安全訪問指定訪問掩碼。默認值為 KEY_WRITE。 參閱 Access Rights 了解其它允許值。
如果 key 是預定義鍵之一，sub_key 可能會是 None。該情況下，返回的句柄就是傳入函數的句柄。
如果鍵已經存在，則該函數打開已經存在的該鍵。
返回值是所開打鍵的句柄。如果函數失敗，則引發一個 OSError 異常。
引發一個 審計事件 winreg.CreateKey，附帶參數 key, sub_key, access。
引發一個 審計事件 winreg.OpenKey/result，附帶參數 key。
3.2 新版功能.

winreg.DeleteKey(key, sub_key)

刪除指定的鍵。
key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。
sub_key 這個字符串必須是由 key 參數所指定鍵的一個子項。該值項不可以是 None，同時鍵也不可以有子項。
該方法不能刪除帶有子項的鍵。
如果方法成功，則整個鍵，包括其所有值項都會被移除。如果方法失敗，則引發一個 OSError 異常。
引發一個 審計事件 winreg.DeleteKey，附帶參數 key, sub_key, access。

winreg.DeleteKeyEx(key, sub_key, access=KEY_WOW64_64KEY, reserved=0)

刪除指定的鍵。

注解

函數 DeleteKeyEx() 通過 RegDeleteKeyEx 這個 Windows API 函數實現，該函數為 Windows 的64位版本專屬。 參閱 RegDeleteKeyEx 文檔。

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。
sub_key 這個字符串必須是由 key 參數所指定鍵的一個子項。該值項不可以是 None，同時鍵也不可以有子項。
reserved 是一個保留的證書，必須是零。默認值為零。
access 為一個整數，用于給鍵的預期安全訪問指定訪問掩碼。默認值為常量 _WOW64_64KEY 。參閱 Access Rights 了解其它允許值。
該方法不能刪除帶有子項的鍵。
如果方法成功，則整個鍵，包括其所有值項都會被移除。如果方法失敗，則引發一個 OSError 異常。
在不支持的 Windows 版本之上，將會引發 NotImplementedError 異常。
引發一個 審計事件 winreg.DeleteKey，附帶參數 key, sub_key, access。
3.2 新版功能.

winreg.DeleteValue(key, value)

從某個注冊鍵中刪除一個命名值項。
key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。
value 為標識所要刪除值項的字符串。
引發一個 審計事件 winreg.DeleteValue，附帶參數 key, value。

winreg.EnumKey(key, index)

列舉某個已經打開注冊表鍵的子項，并返回一個字符串。
key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。
index 為一個整數，用于標識所獲取鍵的索引。
每次調用該函數都會獲取一個子項的名字。通常它會被反復調用，直到引發 OSError 異常，這說明已經沒有更多的可用值了。
引發一個 審計事件 winreg.EnumKey，附帶參數 key, index。
在 3.3 版更改: 參考 上文。

winreg.EnumValue(key, index)

列舉某個已經打開注冊表鍵的值項，并返回一個元組。
key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。
index 為一個整數，用于標識要獲取值項的索引。
每次調用該函數都會獲取一個子項的名字。通常它會被反復調用，直到引發 OSError 異常，這說明已經沒有更多的可用值了。
結果為3元素的元組。

引發一個 審計事件 winreg.EnumValue，附帶參數 key, index。

在 3.3 版更改: 參考 上文。

winreg.ExpandEnvironmentStrings(str)
Expands environment variable placeholders %NAME% in strings like REG_EXPAND_SZ:

>>>
>>> ExpandEnvironmentStrings('%windir%')
'C:\\Windows'
引發一個 審計事件 winreg.ExpandEnvironmentStrings，附帶參數 str。

winreg.FlushKey(key)
將某個鍵的所有屬性寫入注冊表。

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

It is not necessary to call FlushKey() to change a key. Registry changes are flushed to disk by the registry using its lazy flusher. Registry changes are also flushed to disk at system shutdown. Unlike CloseKey(), the FlushKey() method returns only when all the data has been written to the registry. An application should only call FlushKey() if it requires absolute certainty that registry changes are on disk.

注解 If you don't know whether a FlushKey() call is required, it probably isn't.
winreg.LoadKey(key, sub_key, file_name)
Creates a subkey under the specified key and stores registration information from a specified file into that subkey.

key is a handle returned by ConnectRegistry() or one of the constants HKEY_USERS or HKEY_LOCAL_MACHINE.

sub_key is a string that identifies the subkey to load.

file_name is the name of the file to load registry data from. This file must have been created with the SaveKey() function. Under the file allocation table (FAT) file system, the filename may not have an extension.

A call to LoadKey() fails if the calling process does not have the SE_RESTORE_PRIVILEGE privilege. Note that privileges are different from permissions -- see the RegLoadKey documentation for more details.

If key is a handle returned by ConnectRegistry(), then the path specified in file_name is relative to the remote computer.

引發一個 審計事件 winreg.LoadKey，附帶參數 key, sub_key, file_name。

winreg.OpenKey(key, sub_key, reserved=0, access=KEY_READ)
winreg.OpenKeyEx(key, sub_key, reserved=0, access=KEY_READ)
Opens the specified key, returning a handle object.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

sub_key is a string that identifies the sub_key to open.

reserved is a reserved integer, and must be zero. The default is zero.

access is an integer that specifies an access mask that describes the desired security access for the key. Default is KEY_READ. See Access Rights for other allowed values.

The result is a new handle to the specified key.

If the function fails, OSError is raised.

引發一個 審計事件 winreg.OpenKey，附帶參數 key, sub_key, access。

引發一個 審計事件 winreg.OpenKey/result，附帶參數 key。

在 3.2 版更改: Allow the use of named arguments.

在 3.3 版更改: 參考 上文。

winreg.QueryInfoKey(key)
Returns information about a key, as a tuple.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

結果為3元素的元組。

索引

意義

0

An integer giving the number of sub keys this key has.

1

An integer giving the number of values this key has.

2

An integer giving when the key was last modified (if available) as 100's of nanoseconds since Jan 1, 1601.

引發一個 審計事件 winreg.QueryInfoKey，附帶參數 key。

winreg.QueryValue(key, sub_key)
Retrieves the unnamed value for a key, as a string.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

sub_key is a string that holds the name of the subkey with which the value is associated. If this parameter is None or empty, the function retrieves the value set by the SetValue() method for the key identified by key.

Values in the registry have name, type, and data components. This method retrieves the data for a key's first value that has a NULL name. But the underlying API call doesn't return the type, so always use QueryValueEx() if possible.

引發一個 審計事件 winreg.QueryValue，附帶參數 key, sub_key, value_name。

winreg.QueryValueEx(key, value_name)
Retrieves the type and data for a specified value name associated with an open registry key.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

value_name is a string indicating the value to query.

The result is a tuple of 2 items:

索引

意義

0

The value of the registry item.

1

An integer giving the registry type for this value (see table in docs for SetValueEx())

引發一個 審計事件 winreg.QueryValue，附帶參數 key, sub_key, value_name。

winreg.SaveKey(key, file_name)
Saves the specified key, and all its subkeys to the specified file.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

file_name is the name of the file to save registry data to. This file cannot already exist. If this filename includes an extension, it cannot be used on file allocation table (FAT) file systems by the LoadKey() method.

If key represents a key on a remote computer, the path described by file_name is relative to the remote computer. The caller of this method must possess the SeBackupPrivilege security privilege. Note that privileges are different than permissions -- see the Conflicts Between User Rights and Permissions documentation for more details.

This function passes NULL for security_attributes to the API.

引發一個 審計事件 winreg.SaveKey，附帶參數 key, file_name。

winreg.SetValue(key, sub_key, type, value)
Associates a value with a specified key.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

sub_key is a string that names the subkey with which the value is associated.

type is an integer that specifies the type of the data. Currently this must be REG_SZ, meaning only strings are supported. Use the SetValueEx() function for support for other data types.

value is a string that specifies the new value.

If the key specified by the sub_key parameter does not exist, the SetValue function creates it.

Value lengths are limited by available memory. Long values (more than 2048 bytes) should be stored as files with the filenames stored in the configuration registry. This helps the registry perform efficiently.

The key identified by the key parameter must have been opened with KEY_SET_VALUE access.

引發一個 審計事件 winreg.SetValue，附帶參數 key, sub_key, type, value。

winreg.SetValueEx(key, value_name, reserved, type, value)
Stores data in the value field of an open registry key.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

value_name is a string that names the subkey with which the value is associated.

reserved can be anything -- zero is always passed to the API.

type is an integer that specifies the type of the data. See Value Types for the available types.

value is a string that specifies the new value.

This method can also set additional value and type information for the specified key. The key identified by the key parameter must have been opened with KEY_SET_VALUE access.

To open the key, use the CreateKey() or OpenKey() methods.

Value lengths are limited by available memory. Long values (more than 2048 bytes) should be stored as files with the filenames stored in the configuration registry. This helps the registry perform efficiently.

引發一個 審計事件 winreg.SetValue，附帶參數 key, sub_key, type, value。

winreg.DisableReflectionKey(key)
Disables registry reflection for 32-bit processes running on a 64-bit operating system.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

Will generally raise NotImplementedError if executed on a 32-bit operating system.

If the key is not on the reflection list, the function succeeds but has no effect. Disabling reflection for a key does not affect reflection of any subkeys.

引發一個 審計事件 winreg.DisableReflectionKey，附帶參數 key。

winreg.EnableReflectionKey(key)
Restores registry reflection for the specified disabled key.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

Will generally raise NotImplementedError if executed on a 32-bit operating system.

Restoring reflection for a key does not affect reflection of any subkeys.

引發一個 審計事件 winreg.EnableReflectionKey，附帶參數 key。

winreg.QueryReflectionKey(key)
Determines the reflection state for the specified key.

key 為某個已經打開的鍵，或者預定義的 HKEY_* 常量 之一。

Returns True if reflection is disabled.

Will generally raise NotImplementedError if executed on a 32-bit operating system.

引發一個 審計事件 winreg.QueryReflectionKey，附帶參數 key。

常數
The following constants are defined for use in many _winreg functions.

HKEY_* Constants
winreg.HKEY_CLASSES_ROOT
Registry entries subordinate to this key define types (or classes) of documents and the properties associated with those types. Shell and COM applications use the information stored under this key.

winreg.HKEY_CURRENT_USER
Registry entries subordinate to this key define the preferences of the current user. These preferences include the settings of environment variables, data about program groups, colors, printers, network connections, and application preferences.

winreg.HKEY_LOCAL_MACHINE
Registry entries subordinate to this key define the physical state of the computer, including data about the bus type, system memory, and installed hardware and software.

winreg.HKEY_USERS
Registry entries subordinate to this key define the default user configuration for new users on the local computer and the user configuration for the current user.

winreg.HKEY_PERFORMANCE_DATA
Registry entries subordinate to this key allow you to access performance data. The data is not actually stored in the registry; the registry functions cause the system to collect the data from its source.

winreg.HKEY_CURRENT_CONFIG
Contains information about the current hardware profile of the local computer system.

winreg.HKEY_DYN_DATA
This key is not used in versions of Windows after 98.

Access Rights
For more information, see Registry Key Security and Access.

winreg.KEY_ALL_ACCESS
Combines the STANDARD_RIGHTS_REQUIRED, KEY_QUERY_VALUE, KEY_SET_VALUE, KEY_CREATE_SUB_KEY, KEY_ENUMERATE_SUB_KEYS, KEY_NOTIFY, and KEY_CREATE_LINK access rights.

winreg.KEY_WRITE
Combines the STANDARD_RIGHTS_WRITE, KEY_SET_VALUE, and KEY_CREATE_SUB_KEY access rights.

winreg.KEY_READ
Combines the STANDARD_RIGHTS_READ, KEY_QUERY_VALUE, KEY_ENUMERATE_SUB_KEYS, and KEY_NOTIFY values.

winreg.KEY_EXECUTE
Equivalent to KEY_READ.

winreg.KEY_QUERY_VALUE
Required to query the values of a registry key.

winreg.KEY_SET_VALUE
Required to create, delete, or set a registry value.

winreg.KEY_CREATE_SUB_KEY
Required to create a subkey of a registry key.

winreg.KEY_ENUMERATE_SUB_KEYS
Required to enumerate the subkeys of a registry key.

winreg.KEY_NOTIFY
Required to request change notifications for a registry key or for subkeys of a registry key.

winreg.KEY_CREATE_LINK
Reserved for system use.

64-bit Specific
For more information, see Accessing an Alternate Registry View.

winreg.KEY_WOW64_64KEY
Indicates that an application on 64-bit Windows should operate on the 64-bit registry view.

winreg.KEY_WOW64_32KEY
Indicates that an application on 64-bit Windows should operate on the 32-bit registry view.

Value Types
For more information, see Registry Value Types.

winreg.REG_BINARY
Binary data in any form.

winreg.REG_DWORD
32-bit number.

winreg.REG_DWORD_LITTLE_ENDIAN
A 32-bit number in little-endian format. Equivalent to REG_DWORD.

winreg.REG_DWORD_BIG_ENDIAN
A 32-bit number in big-endian format.

winreg.REG_EXPAND_SZ
Null-terminated string containing references to environment variables (%PATH%).

winreg.REG_LINK
A Unicode symbolic link.

winreg.REG_MULTI_SZ
A sequence of null-terminated strings, terminated by two null characters. (Python handles this termination automatically.)

winreg.REG_NONE
No defined value type.

winreg.REG_QWORD
A 64-bit number.

3.6 新版功能.

winreg.REG_QWORD_LITTLE_ENDIAN
A 64-bit number in little-endian format. Equivalent to REG_QWORD.

3.6 新版功能.

winreg.REG_RESOURCE_LIST
A device-driver resource list.

winreg.REG_FULL_RESOURCE_DESCRIPTOR
A hardware setting.

winreg.REG_RESOURCE_REQUIREMENTS_LIST
A hardware resource list.

winreg.REG_SZ
A null-terminated string.

Registry Handle Objects
This object wraps a Windows HKEY object, automatically closing it when the object is destroyed. To guarantee cleanup, you can call either the Close() method on the object, or the CloseKey() function.

All registry functions in this module return one of these objects.

All registry functions in this module which accept a handle object also accept an integer, however, use of the handle object is encouraged.

Handle objects provide semantics for __bool__() -- thus

if handle:
print("Yes")
will print Yes if the handle is currently valid (has not been closed or detached).

The object also support comparison semantics, so handle objects will compare true if they both reference the same underlying Windows handle value.

Handle objects can be converted to an integer (e.g., using the built-in int() function), in which case the underlying Windows handle value is returned. You can also use the Detach() method to return the integer handle, and also disconnect the Windows handle from the handle object.

PyHKEY.Close()
Closes the underlying Windows handle.

If the handle is already closed, no error is raised.

PyHKEY.Detach()
Detaches the Windows handle from the handle object.

The result is an integer that holds the value of the handle before it is detached. If the handle is already detached or closed, this will return zero.

After calling this function, the handle is effectively invalidated, but the handle is not closed. You would call this function when you need the underlying Win32 handle to exist beyond the lifetime of the handle object.

引發一個 審計事件 winreg.PyHKEY.Detach，附帶參數 key。

PyHKEY.__enter__()
PyHKEY.__exit__(*exc_info)
The HKEY object implements __enter__() and __exit__() and thus supports the context protocol for the with statement:

with OpenKey(HKEY_LOCAL_MACHINE, "foo") as key:
... # work with key
will automatically close key when control leaves the with block.  

 更多內容請參考官方網站介紹。