Moving Startup Entries from HKML to HKCU in Windows using Autoruns64.exe

Abstract: Resolve permission errors and restrict machine-wide startup items to a specific user account by moving HKLM registry entries to HKCU using Autoruns64.exe.

Created: 2026-08-03 by
To move startup entries from the machine-level registry (HKLM) to the user-level (HKCU) in Windows, use Sysinternals Autoruns64.exe. Launch the tool with administrative privileges, locate the desired entry under the Logon or Explorer tabs, right-click it, and select "Move To User" from the context menu. This action transfers the configuration data, allowing the program to run only for your specific account rather than all users on the system.

Why Move Startup Entries Between Registry Hives

Windows manages programs that launch automatically during boot or login through two primary registry locations: HKEY_LOCAL_MACHINE (HKLM) and HKEY_CURRENT_USER (HKCU). Entries stored in HKLM apply to every user profile on the computer, requiring administrative rights to modify. In contrast, HKCU entries are isolated to the current user, offering greater flexibility and security without needing elevated permissions.

Moving an entry from HKLM to HKCU is often necessary when you want a specific application to start only for your personal workflow, not for shared accounts. It also helps resolve permission errors where standard users cannot disable or enable machine-wide startup items. By shifting these entries, you gain granular control over your desktop environment while maintaining system-wide stability for other applications.

Prerequisites and Preparation

Before attempting to move any registry-based startup entries, ensure you have the correct tools installed. The official utility required for this task is Autoruns64.exe, part of the Microsoft Sysinternals suite. You must download this tool from the official Microsoft website to avoid malware risks associated with third-party sources.

Additionally, running Autoruns requires Administrator privileges because reading and modifying HKLM keys is restricted by default. If you do not run the tool as an administrator, you may see grayed-out options or receive access denied errors when trying to interact with machine-wide entries. Ensure your user account has local administrator rights before proceeding.

Step-by-Step Guide to Moving Entries

Follow these steps to transfer a startup entry from HKLM to HKCU safely and efficiently.

  1. Download and Extract: Obtain the latest version of the Sysinternals Suite from Microsoft. Extract the Autoruns64.exe file to a permanent folder, such as C:\Tools\Sysinternals, so it remains accessible after future updates.
  2. Launch with Admin Rights: Right-click Autoruns64.exe and select "Run as administrator." Confirm the User Account Control (UAC) prompt if it appears. This ensures the tool can read protected registry keys and write changes back correctly.
  3. Navigate to Startup Tabs: Once opened, click the "Logon" tab to view programs that start when you sign in, or the "Explorer" tab for shell extensions and DLLs loaded by File Explorer. These tabs contain most common startup entries.
  4. Identify the Target Entry: Scan the list for the program you wish to move. Entries originating from HKLM will typically show their full path in the Image Path column. Verify the path to ensure you are selecting the correct executable.
  5. Execute the Move Command: Right-click the selected entry. In the context menu, look for the option labeled "Move To User." Click this option. The tool will automatically copy the relevant registry values from HKLM to HKCU and disable the original HKLM entry.

If the "Move To User" option is grayed out, the entry might be a service rather than a logon item, or it may be locked by another process. In such cases, check the "Services" tab or restart the computer into Safe Mode to release locks.

Verifying the Change

After moving the entry, it is crucial to verify that the operation succeeded. The original entry in the HKLM section should now appear crossed out or disabled, indicating it is no longer active. Simultaneously, a new entry should appear in the HKCU section of the same tab, reflecting the same configuration but under your user profile.

To confirm functionality, restart your computer. Upon logging back in, ensure the application launches as expected. If it does not start, check the Event Viewer or re-run Autoruns to inspect for errors. This verification step prevents accidental removal of critical system components that might be needed for other users.

Troubleshooting Common Issues

Sometimes, moving entries can lead to unexpected behavior. If an application fails to start after the move, check if it relies on system-wide resources or environment variables defined in HKLM. Some enterprise software requires machine-level registration for licensing or network connectivity reasons.

Another common issue is orphaned registry keys. If you manually delete entries instead of using the "Move" function, leftover references may persist. Always use Autoruns to manage these changes to maintain registry hygiene. For more advanced management techniques, consider reviewing Moving Startup Entries from HKLM to HKCU using Autoruns64.exe for deeper insights into batch operations.

Best Practices for Startup Management

Regularly auditing your startup items improves system performance and security. Disable unnecessary entries to reduce boot time and memory usage. However, never disable entries related to antivirus software, graphics drivers, or essential hardware utilities unless you understand their function.

Keep Autoruns updated to recognize new formats and emerging threats. The tool frequently adds support for new types of auto-start mechanisms, ensuring comprehensive coverage. Combining manual review with automated scans provides the most robust defense against unwanted background processes.

Frequently Asked Questions

Can I move multiple entries at once?

No, Autoruns does not support bulk moving of entries via the right-click menu. You must select each entry individually and choose "Move To User" one by one. This design prevents accidental mass modifications that could destabilize the system.

What happens to the original HKLM entry after moving?

The original HKLM entry is effectively disabled and removed from the active startup sequence. Autoruns typically deletes the key or marks it as inactive, ensuring it no longer loads at boot. The new HKCU entry takes its place for your specific user profile.

Is it safe to move system services using this method?

It is generally not recommended to move core system services from HKLM to HKCU. Services often require specific permissions and dependencies that are tied to the machine hive. Moving them may cause boot failures or security vulnerabilities. Stick to moving user-level applications found in the Logon tab.

How do I revert a moved entry back to HKLM?

To revert the change, open Autoruns again, locate the entry in the HKCU section, right-click it, and select "Delete." Then, manually recreate the entry in HKLM using the Registry Editor or restore it from a backup if available. There is no direct "Move Back" button in the interface.

Does this work on Windows 11?

Yes, Autoruns64.exe is fully compatible with Windows 11. The registry structure for startup entries remains consistent across recent Windows versions. The tool adapts to the UI changes in Windows 11 while interacting with the underlying registry keys in the same manner as in Windows 10.

Latest News

How to Display Output of xterm Command in Terminal Screen using Cron

Resolve the inability to display xterm output in a terminal screen from cron by redirecting logs or using wall instead of insecure X11 workarounds.

Read More
Expose Local Server on VPS Preserving Real Client IPs (OS Level)

Resolve VPS logging showing only gateway IPs by configuring reverse proxies to forward real client addresses via X-Forwarded-For headers.

Read More
How to Clear Recent Files History in Linux without Deleting Actual Files?

Clear recent files history in Linux by deleting ~/.local/share/recently-used.xbel without removing the actual files.

Read More
Best HDD Copy Strategy: Manually Syncing and Rewriting Scratch

Resolve data drift between two 4TB hard drives by using rsync with the --delete flag to manually sync and rewrite scratch data for an exact mirror.

Read More
Understanding Bash Prompt Abbreviations: An Overview

Resolve repetitive typing errors by creating and persisting Bash aliases in the .bashrc file for improved command-line efficiency.

Read More
Free Tools and Methods to Log Real-Time Performance Details in Task Manager

Log real-time CPU and memory metrics to CSV files using Windows Performance Monitor Data Collector Sets to troubleshoot system slowness.

Read More
Contact Qatar Airways Customer Service: Phone Number, Help Center, and More

Resolve urgent Qatar Airways reservation issues like flight changes and baggage claims using the US phone number +1801-855-5905 or online self-service tools.

Read More
Windows 11: Alt Codes Displaying Wrong Characters - Solutions

Resolve Windows 11 Alt codes showing wrong characters by verifying the US keyboard layout and enabling Num Lock.

Read More
Run Programs with Elevated Privileges: A Comprehensive Guide

Eliminates the need to type sudo for frequent administrative tasks by configuring .bashrc aliases or functions.

Read More
Dynamically Changing Dates in Excel Formulas Using Cells

Eliminate manual date updates in Excel by using cell references to create dynamic formulas that automatically adjust calculations when input dates change.

Read More
Granting Edit Access to a Specific Excel Sheet in an Office 365 User Email ID-Based Login

Excel Online lacks native sheet-level permissions, so users must split workbooks or use worksheet protection to isolate edit access for specific tabs.

Read More
Creating Network Load on Local Wi-Fi from One PC

Generate sustained Wi-Fi bandwidth load from a single PC using a VM SFTP server to test router stability and throughput.

Read More
Changing the Default Editor for Batch Files in Windows 11's File Explorer

Resolve the issue of batch files opening in Notepad by changing the default editor to a preferred application like VS Code.

Read More
Gain WiFi Connection Minutes Before Losing it by Changing MAC Address

Bypass MAC address filtering to restore WiFi connectivity temporarily when a device is blocked by network administrators.

Read More
Photos Folders Turned Black: Troubleshooting Picture Applications on Windows

Resolve black screens in Windows Photos by resetting the app, updating graphics drivers, and repairing system files.

Read More
Troubleshooting High CPU Temperature Values: A Step-by-Step Guide

Resolve high CPU temperatures and thermal throttling by monitoring with Speedfan, cleaning dust from cooling components, and replacing degraded thermal paste.

Read More
Make cURL establish TLS connection with CA unknown

Resolve cURL TLS connection failures with unknown or self-signed certificates by using the --insecure flag to bypass CA validation.

Read More
Troubleshooting Incorrect Network Metrics Values in Grafana, Prometheus, InfluxDB, and Telegraf

Fix incorrect network metrics in Grafana, Prometheus, InfluxDB, and Telegraf by verifying interface selection, resolving unit mismatches, and handling counter resets.

Read More
Start Another Terminal Window (cmd.exe) Windows Repair/Troubleshoot

Provides step-by-step instructions to access the Windows Command Prompt via bootable media for advanced system repair and troubleshooting.

Read More
Thinkpad P1 Gen 6: Sudden Thunderbolt 3 Dock USB-C Charging Stopped Working

Resolve sudden Thunderbolt 3 dock USB-C charging and internet failure on ThinkPad P1 Gen 6 by updating firmware, resetting the dock, and adjusting power settings.

Read More
ASUS Windows 11 Laptop: Internet Connection Issue with Hotspot

Resolve ASUS Windows 11 laptop spinning wheel issue when connecting to mobile hotspot by resetting network stack, disabling IPv6, and adjusting power settings.

Read More
Developing iOS Project with Firebase: Logging in and Sending Push Notifications

Integrates Firebase to enable secure user authentication and push notifications in iOS applications.

Read More
Troubleshooting Bash Script with Suspected Issues of Spaces, Dashes, Filenames and Quoting

Resolve Bash script failures caused by word splitting, globbing, and special characters in filenames by applying proper quoting techniques.

Read More
Populating OneDrive Folder for Local Backup without Affecting Remote Files

Prevent OneDrive from deleting remote files during Windows reinstallation by unlinking the account or using symbolic links to isolate local data.

Read More
Force First Frame as Keyframe Without Re-encoding: A Quick Solution

Resolve inaccurate seeking and playback glitches by re-encoding video to ensure the first frame is a valid keyframe.

Read More
Find Information in Database Using WSL (Ubuntu) on Windows-10

Resolve database connection issues from WSL Ubuntu on Windows 10 by configuring client tools and network access to query remote or local servers.

Read More
Configuring a New Router with Different Networks: One Family, One Guest

Resolve IP conflicts and isolate guest traffic by configuring a second router with a distinct subnet via its WAN port.

Read More
Quickly Open Multiple Stock Websites with a Single Command

Solve the problem of manually opening multiple stock research websites by creating a single command to launch them simultaneously on Windows, macOS, or Linux.

Read More
Improved Adobe Acrobat Search Experience: Access Advanced Search with Ease

Access advanced search filters like case sensitivity and regex in Adobe Acrobat by clicking More Options in the Find bar.

Read More
Port Forwarding VM via OpenVPN: A Comprehensive Guide

Configure OpenVPN server and iptables to forward specific ports from VPN clients to a virtual machine's internal IP address.

Read More
Understanding Partitions in the 1980s: A Look Back at MS-DOS and Master Boot Record

Explains how the Master Boot Record and partition table enabled MS-DOS to manage multiple disk volumes on a single physical drive.

Read More
Windows 10 Enterprise: Keyboard Not Detected in Managed Organization with Admin Privileges

Resolve Windows 10 Enterprise keyboard detection failures caused by Group Policy restrictions, driver corruption, or USB enumeration errors.

Read More
Can't Find x86_64 Versions of Applications on MacOS arm64 (M1)

Resolve missing x86_64 app issues on M1 Macs by installing Rosetta 2 and reinstalling apps as universal binaries.

Read More
How to Hide Installation Source for an Android App

Manage Android app installation source visibility by using USB transfers or file managers to reduce browser traces and isolate data via work profiles.

Read More
Connecting Momentus 4200.2 ST9808210A Hard Drive via USB Cable

Resolve inability to access Seagate Momentus 4200.2 ST9808210A hard drive by connecting it via USB using a compatible SATA-to-USB adapter and configuring the disk in Windows.

Read More