Click here to Skip to main content
13,346,480 members (65,663 online)
Click here to Skip to main content
Add your own
alternative version


106 bookmarked
Posted 7 Jul 2003

RegistryMonitor - a .NET wrapper class for RegNotifyChangeKeyValue

, 16 Jan 2006
Rate this:
Please Sign up or sign in to vote.
The Windows API provides a function RegNotifyChangeKeyValue, which is not covered by the Microsoft.Win32.RegistryKey class. This solution imports that function and encapsulates it in a convenient manner.

Sample Image - RegistryMonitor.png


The Windows API provides a function RegNotifyChangeKeyValue, which notifies the caller about changes to attributes or the content of a specified registry key. Unfortunately, this function is not provided by the Microsoft.Win32.RegistryKey class. Because I needed that functionality, I've written a simple wrapper class.



RegistryMonitor has three constructors, the parameter lists should be self-explanatory:

RegistryMonitor(RegistryKey registryKey)
RegistryMonitor(string name)
RegistryMonitor(RegistryHive registryHive, string subKey)


RegistryMonitor supports two events:

public event EventHandler RegChanged;
public event ErrorEventHandler Error;

The RegChanged event is raised when the registry key specified during construction has changed. Error is raised when an exception occurs.

The latter event is necessary because the monitoring is hosted in a different thread.


RegistryMonitor has only one property:

public RegChangeNotifyFilter RegChangeNotifyFilter { get; set; }

RegChangeNotifyFilter is an enum. Since I don't want to repeat its implementation here in the article, I just want to say that it controls which kinds of registry changes will be detected, e.g. only key or value changes.


RegistryMonitor has two public methods which are declared as follows:

public void Start();
public void Stop();

I don't think that these methods require much explanation. The former creates a separate thread, which will monitor the registry, and the latter will stop that thread.


Because a simple example will say more than a thousand words, here's a console sample monitoring HKCU\Environment (that's where the current user's environment variables are stored):

public class MonitorSample
    static void Main() 
        RegistryMonitor monitor = new 
          RegistryMonitor(RegistryHive.CurrentUser, "Environment");
        monitor.RegChanged += new EventHandler(OnRegChanged);
    private void OnRegChanged(object sender, EventArgs e)
        Console.WriteLine("registry key has changed");

Provided with this article is another demo, which is a WinForms application (however, a VS.NET 2003 solution).

Points of interest

The first version of RegistryMonitor used reflection to retrieve the private hkey field of the Microsoft.Win32.RegistryKey class. However, Microsoft changed the internal implementation, so this hack didn't work anymore (see the comments below). Therefore I changed my implementation, so that RegistryMonitor now uses P/Invoke to open and close the registry key explicitly.


  • 08-Jul-2003 - Initial release.
  • 15-Jan-2005 - Updated to work for both .NET 1.1 and 2.0.


This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)


About the Author

Thomas Freudenberg
Technical Lead Cubeware GmbH
Germany Germany
No Biography provided

You may also be interested in...

Comments and Discussions

AnswerRe: How can I get the changed value and the type? Pin
Thomas Freudenberg5-Sep-08 9:22
memberThomas Freudenberg5-Sep-08 9:22 
GeneralOnRegChanged - Object Ref not set to instance Pin
Bergeir1-Jul-08 8:24
memberBergeir1-Jul-08 8:24 
QuestionMissing files? Pin
tatowaki12-Feb-08 9:54
membertatowaki12-Feb-08 9:54 
AnswerRe: Missing files? Pin
Thomas Freudenberg12-Feb-08 10:54
memberThomas Freudenberg12-Feb-08 10:54 
Generalthread issues [modified] Pin
TheShaver20-Aug-07 1:10
memberTheShaver20-Aug-07 1:10 
Questionused in .net 2005? Pin
Paul Pang20-Jul-07 7:59
memberPaul Pang20-Jul-07 7:59 
AnswerRe: used in .net 2005? Pin
eddewind9-Oct-07 19:15
membereddewind9-Oct-07 19:15 
Generalmonitor more precisely Pin
Alexandre GRANVAUD14-May-07 22:54
memberAlexandre GRANVAUD14-May-07 22:54 
Hi would it be possible to monitor changes precisely : i mean, knowing what exactly changed ?
AnswerRe: monitor more precisely Pin
Thomas Freudenberg15-May-07 5:55
memberThomas Freudenberg15-May-07 5:55 
GeneralRe: monitor more precisely Pin
jgehman13-Jun-07 4:57
memberjgehman13-Jun-07 4:57 
AnswerRe: monitor more precisely Pin
Thomas Freudenberg13-Jun-07 5:04
memberThomas Freudenberg13-Jun-07 5:04 
GeneralRe: monitor more precisely Pin
N_Nguyen26-Nov-08 11:58
memberN_Nguyen26-Nov-08 11:58 
GeneralAny way of knowing which process initiated the change Pin
drinkwater11-Apr-07 18:44
memberdrinkwater11-Apr-07 18:44 
GeneralRe: Any way of knowing which process initiated the change Pin
Thomas Freudenberg15-Apr-07 22:43
memberThomas Freudenberg15-Apr-07 22:43 
AnswerRe: Any way of knowing which process initiated the change Pin
Vivek_India7-Aug-09 0:54
memberVivek_India7-Aug-09 0:54 
GeneralRe: Any way of knowing which process initiated the change [modified] Pin
Thomas Freudenberg7-Aug-09 1:15
memberThomas Freudenberg7-Aug-09 1:15 
AnswerRe: Any way of knowing which process initiated the change Pin
Vivek_India9-Aug-09 23:39
memberVivek_India9-Aug-09 23:39 
Question~(*|*)~How can I monitor Registry for a special process? Pin
behnam_iut14-Dec-06 11:28
memberbehnam_iut14-Dec-06 11:28 
AnswerRe: ~(*|*)~How can I monitor Registry for a special process? Pin
Thomas Freudenberg14-Dec-06 11:31
memberThomas Freudenberg14-Dec-06 11:31 
GeneralProposal for Enhancements Pin
LJEstrada25-Sep-06 6:19
memberLJEstrada25-Sep-06 6:19 
GeneralRe: Proposal for Enhancements Pin
Thomas Freudenberg27-Sep-06 12:40
memberThomas Freudenberg27-Sep-06 12:40 
GeneralNot able to run multiple instances Pin
sanzay mishra22-Sep-06 8:24
membersanzay mishra22-Sep-06 8:24 
GeneralRe: Not able to run multiple instances Pin
Thomas Freudenberg27-Sep-06 12:38
memberThomas Freudenberg27-Sep-06 12:38 
GeneralRe: Not able to run multiple instances Pin
sanzay mishra29-Sep-06 8:02
membersanzay mishra29-Sep-06 8:02 
GeneralDoesn't fire on Windows 2003 [modified] - it does(!!!) Pin
Michael B. Hansen19-Jul-06 5:22
memberMichael B. Hansen19-Jul-06 5:22 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

Permalink | Advertise | Privacy | Terms of Use | Mobile
Web01 | 2.8.180111.1 | Last Updated 16 Jan 2006
Article Copyright 2003 by Thomas Freudenberg
Everything else Copyright © CodeProject, 1999-2018
Layout: fixed | fluid