check for sources of failure

[ericlaw1979]

if (RegOpenKeyEx (HKEY_CURRENT_USER, TEXT("Software\Policies\Microsoft\Windows\System"),
0, KEY_READ, &hKey) == ERROR_SUCCESS) {
dwSize = sizeof(INT);
RegQueryValueEx (hKey, TEXT("DisableCMD"

[ericlaw1979]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers] Add the REG_SZ value: Name: c:\windows\system32\cmd.exe Value: RUNASADMIN

[ericlaw1979]

Software\Policies\Google\Chrome\NativeMessagingUserLevelHosts
Software\Policies\Google\Chrome\NativeMessagingAllowlist
Software\Policies\Google\Chrome\NativeMessagingBlocklist
https://chromeenterprise.google/policies/atomic-groups/#NativeMessaging