Re: GP for Registry Security

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

jabrandt_at_online.microsoft.com
Date: 08/02/04 

Date: Mon, 2 Aug 2004 15:57:53 -0500

There are settings in Group Policy to set the security on registry keys.
If you know of a specific set of registry keys you are trying to prevent
modification on use permissions. 

-- 
James Brandt [MSFT]
"Herb Martin" <news@LearnQuick.com> wrote in message 
news:upwxWsddEHA.216@TK2MSFTNGP11.phx.gbl...
> Yes, as Alexander wrote to you, it is right there in
> the Computer Windows Security section but it's
> pretty difficult to get "right" by just that method so
> consider this:
>
>    Setup and test a machine similar to your real machines
>    in a test lab; then EXPORT the Security Policy with
>    SecEdit or SCA MSC -- this can then be edited and/or
>    imported directly into a GPO.
>
> -- 
> Herb Martin
>
>
> "kmkrause2" <kmkrause2@discussions.microsoft.com> wrote in message
> news:D52D7EA3-8CCD-4722-8BC2-0148E4071117@microsoft.com...
>> Is there anything in Group Policies that I can use to control registry
> keys' security settings?
>>
>> I have applied security settings for IE's security zones, but users are
> able to use regedit to make changes (add trusted sites) to their registry. 
> I
> can elimnate regedit and regedt32 as usable programs, however I would like 
> a
> more granular setting where I can control some of the registry keys, while
> leaving others accessible.
>>
>> TIA,
>> Ken
>
>

Relevant Pages

  • RE: Several Problems; how to reset security and troubleshoot serve
    ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... Proxycfg settings WORKED. ... Microsoft Windows 2000 Operating System Group Policy Result tool ... The user is a member of the following security groups: ...
    (microsoft.public.windowsupdate)
  • Please help, "security settings" in GPO for default domain policy does not get processed
    ... I've added registry settings in "security settings">registry. ... Group Policy was applied from: ... The user received "Internet Explorer Branding" settings from these GPOs: ... Default Domain Policy ...
    (microsoft.public.win2000.group_policy)
  • Re: Problems configuring security for services
    ... I would think that the permissions you describe should be fine. ... thought that those permissions on the services in the Group Policy were ... you see what's wrong by looking in the Windows security Event Log. ... > settings to try to reset ...
    (microsoft.public.win2000.security)
  • Re: Problems configuring security for services
    ... Do you know of any good references for setting permissions ... >> and Security Templates on a Windows 2000 Advanced Server ... settings to try to ... >the group policy back to the state of a fresh new install ...
    (microsoft.public.win2000.security)