Re: Permission prob writing to HKEY_LOCAL_MACHINE

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Mark V (notvalid_at_invalid.nul)
Date: 03/09/04 

Date: Tue, 09 Mar 2004 06:58:24 -0800

In microsoft.public.win2000.registry Terry Holland wrote:

> I have an app that reads & write to
> [HKEY_LOCAL_MACHINE\SOFTWARE\MyCompany\MyApp] in the registry. On
> my development machine this is fine as I am in the Local
> Administrators group, but the users of the application get
> permission error when attempting to write to this key (they are in
> Users group). How do I overcome this?
>
> tia
>
> Terry Holland
>
> ps All user are runnning Win XP (I couldnt find a Win XP reg

The application during installation may need to be done under an
Administrators account, but once installed it should be using HKCU to
which the User logged on has sufficient permissions for Read and
Write.

It it your app.? Can you "fix" it?

Otherwise you need either to raise the user accounts to admin. :-(
Or, change the permissions (ACLs) on the key in question. Not
desirable but it has come up before this. regedt32.exe can alter
(under and administrator account) the registry ACLs for the key and
subkeys. Win32 APIs exist to do so. Regini.exe (Resource Kit) and
SetACL.exe are other tools. SetACL is a bit complex but quite
powerful. http://sourceforge.net/projects/setacl/

You might change the ACE for the local USERS group to FULL for
example. You may need to disable Inherited permissions on the key in
question.

Relevant Pages

  • Re: Shared permissions vs. security
    ... Did you have to make the users power users or administrators only after you ... write/modify permissions to a folder if that is what they need to do their ... -- Verify that membership in the administrators group on all computers is ... updates at Windows Updates. ...
    (microsoft.public.win2000.security)
  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)
  • Re: Windows Server 2003 Auto connect printers;
    ... Users who are Administrators are able to see ... > software applications functioning properly with limited ... > You do this by granting only those permissions that are ... > directory and registry keys at a minimum. ...
    (microsoft.public.win2000.termserv.apps)