Re: Default permissions for OE inside registry key...
From: Jim Carlock (anonymous_at_localhost.com)
Date: 11/18/04
- Next message: black casper: "IIS 6 vs IIS 5 - Character Encoding"
- Previous message: Peter McLaren: "Re: Cant't download "exe" file because of IIS version"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 18 Nov 2004 00:32:13 -0500
:-)
1. The addition of IIS lead me to reinstall XP. IIS adds some keys
to the registry. It uses the RESTRICTED group for a variety of
reasons.
3. There is a NEW named identity. That was the first thing done
after the service packs were installed.
I just have to find out the exact purposes of RESTRICTED now.
My current line of thoughts are that I can just delete that particular
item from the registry for that particular key... but I need to find
some more details about the proper use and how to use.
I think Jim Pickering is correct... so I'm going to tap into the IIS
group as well when I post the reply here.
I'll leave it posted here as well, because it's an OE issue too. ;-)
A very interesting link to read that everyone should be interested
in (about Alternate Data Streams):
http://www.windowsecurity.com/articles/Alternate_Data_Streams.html
I didn't know about it so I'm passing that along hoping it'll help you
guys as well. The IIS guys will probably already know the details
about that, and if not, they should know.
--
Jim Carlock
Post replies to newsgroup.
"PA Bear" <PABear@mvps.org> wrote:
1. What led you to reinstall WinXP?
2. Is this your personal machine or one that belongs to your employer?
3. Have you tried using a new Named Identity?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE)
Jim Carlock wrote:
> When I click on Tools, Accounts, Add New..., News
>
> OE runs through the wizard to add a new news account. That
> goes along just fine. It appears in the list of news servers, but
> double-clicking on the item just added does not open the edit
> dialog box.
>
> If I click on one of the other tabs in the Accounts dialog, lets
> say the Mail tab, then go back to the News tab, the account
> I added no longer appears in the list.
>
> I've isolated it to being a problem with the registry. I went to
> the key listed below, exported one of the numbered subkeys,
> 00000025, edited the .reg file to put the proper parameters
> in place for the new news server account, and restarted OE.
>
> Once I did the registry export and double-clicked the edited
> .reg file OE displays the information properly within:
> Tools, Accounts, News tab.
>
> So there's a registry problem and I don't have another XP
> configuration currently in place that hasn't been messed with,
> so I need the permissions for the keys listed.
>
> Yes that identity is the identity with the problem, but it's a brand
> new identity after a reinstallation of XP.
>
> The registry key permissions were messed with according to
> Microsoft's IIS documentation of permissions. I think the
> RESTRICTED item was added based upon a Microsoft IIS
> page ( I believe ). That was a week or two ago that the
> permissions were messed with.
>
> I'm fairly certain it's a registry permissions thing and I'm almost
> 100% certain that if I took out the RESTRICTED UserID from
> the list of permissions that the problem will go away.
>
> So the permissions on an XP machine running IIS 5.1 are what
> I've narrowed it down to.
>
> The symptoms of the problem are that while the wizard to add
> a new news account works fine, the end result is that the key
> is NEVER created in the registry. And the RESTRICTED UID
> is a user name (?)... it kind of runs along the lines of USERS,
> SYSTEM, AUTHENTICATED USERS, etc.
>
> I'm thinking along the lines that the CREATOR group needs to
> be added to the registry permissions. So I'm asking if someone
> can provide a list of USER/GROUP names and their associated
> permissions for the identity key.
>
> Thanks.
>
> --
> Jim Carlock
> Post replies to newsgroup.
>
> "PA Bear" <PABear@mvps.org> wrote in message
> news:%23S50fbsyEHA.1452@TK2MSFTNGP11.phx.gbl...
> Back up, Jim. Explain your problem creating new news accounts.
>
> Is {33332222-2222-2222-2222-22222232222F} the identity in which you're
> having the problem?
>
> Jim Carlock wrote:
>> I'm running XP SP2 and am seeing the following as the
>> default permissions for the following registry keys:
>>
>> HKEY_CURRENT_USER\Identities\{33332222-2222-2222-2222-22222232222F}
>>
>> Administrators Full Access Inherited from HKCU
>> Administrator Full Access Inherited from HKCU
>> Jack Full Access Inherited from HKCU
>> RESTRICTED Limitations Inherited from HKCU
>> SYSTEM Full Access Inherited from HKCU
>>
>> Does anyone have a list of the permissions that are required for
>> these keys? Or can one of you take a look at your XP machine
>> and provide the context of similar permissions. I've changed the
>> USER Identification key above.
>>
>> Jack is the name of the XP login UID.
>>
>> I'm thinking the RESTRICTED thing above is preventing OE
>> from creating new newsgroup accounts.
>>
>> Thanks.
- Next message: black casper: "IIS 6 vs IIS 5 - Character Encoding"
- Previous message: Peter McLaren: "Re: Cant't download "exe" file because of IIS version"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
