Re: Registry Keys, Permissions and GPO

Whilst as Darren say's there is no native support for this, what you could
do is write a simple vbscript to create the Registry key that you want as
part of a machine startup or logon script.

Once the key is in place you can use registry security through GPO to apply
security to the registry key.

Computer Configuration\Windows Settings\Security Settings\Registry


--
Dave Britt

Dave's Weblog
http://davebritt.blogspot.com



"Darren Mar-Elia (MVP)" <dmanonymous@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:O8oCSmKlGHA.836@xxxxxxxxxxxxxxxxxxxxxxx
Unfortunately, ADMs don't support registry permissions. You might look at
the old regdmp and regini utilities that, if I remember correctly, are
part of the reskit. Regdmp can create regini formatted files that do
include perms. Then you can monkey with the regini file to modify perms
and then use a GP-based computer startup or user logon script to deliver
the regini script.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information
Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
And, the Windows Group Policy Guide is out from Microsoft Press!!! Check
it out at http://www.microsoft.com/mspress/books/8763.asp
GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy



"whistleradmin" <whistleradmin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:461D9347-058C-4DA5-9A34-76D00C2637DA@xxxxxxxxxxxxxxxx

Is there anyway to save a Registry Key in such a manner that the Key and
its
Permissions, preferably the Advanced Permissions, can be sent out via
GPO?

I've been trying to make a Key with RegtoAdm but I haven't yet been able
to
get permissions into the Key.

Can .adm files even hold permissions? What does one look like with
permissions?

thanks.




.

Relevant Pages

  • RE: Constant w3wp.exe and webengine.dll errors
    ... Grant NETWORK SERVICE the necessary permissions to access the ... the permissions on the registry key may be reset. ... To grant NETWORK SERVICE the necessary permissions to access the ASP.NET ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: missing system.mdw file
    ... permissions to create the file, ... >The registry key is not missing. ... Running the SCAN program from the Windows ... >>| I cannot create any new databases in Access 2002 on ...
    (microsoft.public.access.setupconfig)
  • Re: Problems with winexit.exe and "power users"
    ... the solution is to set appropriate permissions for the registry key discussed in that article. ... administrator then copy our administrator profile over our default user ... power users group is logged on, winexit fails when it attempts to log them ...
    (microsoft.public.windowsxp.customize)
  • Re: Cant delete registry key
    ... You were right -- I did not have permissions for that particular key, ... Click the key you want to take ownership of. ... To grant Full Control of a registry key ... Click the key to which you want to grant Full Control. ...
    (microsoft.public.windowsxp.basics)
  • Re: Windows Server 2003 Standard - DCOM Problems
    ... In order to resolve the problem, the following permissions were added ... Registry Key: HKEY_CLASSES_ROOT\CLSID ... When the server boots, it goes all the way to the CTRL+ALT+DEL window. ... desktop by disabling the Computer Browser service and the DCOM Server ...
    (microsoft.public.windows.server.general)