Re: registry editor

From: edubbs (anonymous_at_discussions.microsoft.com)
Date: 02/27/04 

Date: Fri, 27 Feb 2004 12:14:41 -0800

Also, do you have a Group Policy set? If so, go into
Computer Configuration\Windows Settings\Security
Settings\Registry

This setting allows an administrator to define access
permissions (on DACLs) and audit settings (on SACLs) for
registry keys.

Do you have anything set there, either in the Default
Domain Policy or your own GP?

>From the MMC Help file:
<begin paste>
Security settings may still persist even if the setting is
no longer defined in the policy that originally applied it.

Persistence in security settings occurs when:
-The setting has not been previously defined on the local
computer at the time policy was applied.
-The setting is for a registry object in the subtree of the
Registry node.
-The setting is for a file system object.

Whenever Group Policy is applied, the computer stores the
local security settings into a database. If a Group Policy
object defines a security setting, then does not define
that setting, the setting takes on the original local
setting stored in the database. If a value does not exist
in the database, then the setting does not have a setting
to revert to, and it remains defined as is. This behavior
is sometimes referred to as tattooing.

Registry and file settings will remain at the security
setting that is applied through policy until that setting
is set to another value.
</end paste>

Hope that sheds some more light on it.

E

>-----Original Message-----
>What happens when you click on the Edit menu? Do you have
>a Permissions option there?
>
>E
>>-----Original Message-----
>>using ntfs and right clicking on the left as this is where
>i need to set
>>permissions
>>"edubbs" <anonymous@discussions.microsoft.com> wrote in
>message
>>news:281501c3fc94$d1eaa100$a001280a@phx.gbl...
>>> I've never come across that...
>>>
>>> Are you using NTFS?
>>>
>>> E
>>> >-----Original Message-----
>>> >my problem is there is no permissions when i right click
>>> on a key, this is
>>> >what i need to fix
>>> >
>>> >thanks
>>> >
>>> >"edubbs" <anonymous@discussions.microsoft.com> wrote in
>>> message
>>> >news:27bb01c3fc8a$349014d0$a401280a@phx.gbl...
>>> >> In regedit, right click on the Key you want and select
>>> >> Permissions.
>>> >>
>>> >> Why not just make the users part of the Users group? It
>>> >> would be easier than going through the registry to lock
>>> >> down specific keys. Just a thought.
>>> >>
>>> >> E
>>> >> >-----Original Message-----
>>> >> >we are looking to tie down pcs and need to change
>>> >> permissions in the
>>> >> >registry, cannot find out how to show the
>permissions tab
>>> >> in xp
>>> >> >profressional
>>> >> >
>>> >> >have use regedt32 and regedit with no luck, must be
>>> >> missing somenting
>>> >> >obvious
>>> >> >
>>> >> >have local admin rights
>>> >> >
>>> >> >
>>> >> >.
>>> >> >
>>> >
>>> >
>>> >.
>>> >
>>
>>
>>.
>>
>.
>

Relevant Pages

  • Re: Permissions on filesystem via Group policy
    ... can use the Resultant Set of Policy mmc snapin to see exactly what Group ... you want to disable "inherited permissions" in the advanced page if you only ... > Right-click File System and press Add File. ... Use the security settings of that GPO to specify ...
    (microsoft.public.windows.group_policy)
  • Re: [RFC][PATCH] Privilege dropping security module
    ... dpriv.c contains the struct security_operations hooks for dpriv. ... You're masking file permissions. ... And stick with your namespace, ... * Parse policy lines one at a time. ...
    (Linux-Kernel)
  • RE: Locking down a stand-alone 2000 Server with Group Policy
    ... policy from applying to them. ... you won't be able to change the permissions - so make sure ... Locking down a stand-alone 2000 Server with Group Policy ...
    (Security-Basics)
  • [RFC][PATCH] Privilege dropping security module
    ... dpriv.c contains the struct security_operations hooks for dpriv. ... * under the terms of the GNU General Public License as published by the Free ... * Parse policy lines one at a time. ... * Open file descriptors and their implied permissions based on @policy ...
    (Linux-Kernel)
  • Re: Access to Network and Dial-Up Connections blocked
    ... John John wrote: ... if a NoPropertiesMyComputer policy exists: ... I re-enabled Remove Network Connection from ... If this is a permissions issue check and make sure that you have ...
    (microsoft.public.win2000.general)