RegistryPol

The registrypol module allows you to easily parse and create Windows Registry Policy files in Python.

Installation

To install the registrypol module via pip, run the command:

$ pip install registrypol

Usage

Start by importing the registrypol module.

import registrypol

The function registrypol.load, loads an registry policy file.

with open('registry.pol', 'rb') as file:
    registrypol.load(file)

In addition to loading an existing registry policy, policies created using the relevant Values can be dumped to a file using the registrypol.dump function.

with open('registry.pol', 'wb') as file:
    registrypol.dump(policy, file)

RegistryValue

To create a registry value as part of an registry policy, a registrypol.values.RegistryValue must be created.

from registrypol.values import RegistryValue

value = RegistryValue(
    key='Software\Policies\Microsoft\Windows\SrpV2\Exe',
    value='EnforcementMode',
    type='REG_DWORD',
    size=4,
    data=b'\x01\x00\x00\x00'
)

RegistryPolicy

To create an registry policy one or more registry values must be created as described above.

These values can then be used to create an registrypol.policy.RegistryPolicy.

from registrypol.policy import RegistryPolicy

policy = RegistryPolicy(
    values=[
        value
    ]
)