Re: GP for Registry Security

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Herb Martin (news_at_LearnQuick.com)
Date: 07/30/04 

Date: Thu, 29 Jul 2004 20:49:14 -0500

Yes, as Alexander wrote to you, it is right there in
the Computer Windows Security section but it's
pretty difficult to get "right" by just that method so
consider this:

    Setup and test a machine similar to your real machines
    in a test lab; then EXPORT the Security Policy with
    SecEdit or SCA MSC -- this can then be edited and/or
    imported directly into a GPO. 

-- 
Herb Martin
"kmkrause2" <kmkrause2@discussions.microsoft.com> wrote in message
news:D52D7EA3-8CCD-4722-8BC2-0148E4071117@microsoft.com...
> Is there anything in Group Policies that I can use to control registry
keys' security settings?
>
> I have applied security settings for IE's security zones, but users are
able to use regedit to make changes (add trusted sites) to their registry. I
can elimnate regedit and regedt32 as usable programs, however I would like a
more granular setting where I can control some of the registry keys, while
leaving others accessible.
>
> TIA,
> Ken

Relevant Pages

  • RE: Extracting NT password hashes from registry export file
    ... Extracting NT password hashes from registry export file ... This list is provided by the SecurityFocus Security Intelligence Alert Service. ...
    (Pen-Test)
  • [NT] Exchange 2000 System Attendant Incorrectly Sets Remote Registry Permissions
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Microsoft Management Console snap in, the System Attendant makes ... changes to the permissions on the Windows Registry to allow Exchange ... There is a flaw in how the System Attendant makes these Registry ...
    (Securiteam)
  • [NT] NoHTML Built-in Outlook 2002 Feature Protects Against Malicious Code
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... non-encrypted e-mail in plain text format. ... guarantee that problems resulting from the incorrect use of Registry ... For information about how to edit the registry, ...
    (Securiteam)
  • Re: Minimum NTFS Permissions on the SystemDrive
    ... File system and registry access control list modifications ... Microsoft Windows XP and Microsoft Windows Server 2003 have considerably ... You can no longer use the Anonymous security ... Additional ACL changes may invalidate all or most of the application ...
    (microsoft.public.windows.server.security)
  • RE: Extracting NT password hashes from registry export file
    ... Extracting NT password hashes from registry export file ... This list is provided by the SecurityFocus Security Intelligence Alert Service. ...
    (Pen-Test)