Re: Registry run line

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Loyd (loydwho_at_hotmail.com)
Date: 05/02/04 

Date: Sun, 2 May 2004 13:15:05 -0700

"Shenan Stanley" <news_helper@hushmail.com> wrote in message
news:%23nNatEIMEHA.556@tk2msftngp13.phx.gbl...
> Loyd wrote:
> > Hello all, I have a problems I need to keep my 2k/XP users from
> > hosing their computers. I need to keep these keys from being
> > modified.
> >
> > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> > HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run,
> >
> > There are applications which require all the users to be local
> > administrators, so it leaves a pretty big hole open.
> >
> > Can I do it with a group policy or registry permissions?
> >
> > Is there a utility that will warn when the run line is being modified.
> > Thanks for your help in advance.
>
> None that I know of. Your choices, as I see I are:
>
> 1) Stop making them administrators. There is no program that REQUIRES
> someone to be an administrator, just some that require access to certain
> keys in the registry or files in certain directories. Give these rights
to
> the people.
>
> 2) Take away the admin rights to change the RUN key - the bad part about
> that? They can give it back to themselves if they know how and you have
to
> give it back or add your user specifically to it. I'd choose to figure
out
> the keys in the registry and files in folders they need access to and use
> #1. Every user of a computer never needs to be administrator - you only
> need one. (maybe two, just in case.)

Thanks Shenan, I'll research both approaches.

Relevant Pages

  • Re: SMS 2.0 Component Errors - Pre Upgrade
    ... It's possible that the registry is corrupt, ... The other suggestion is try an upgrade instead of site reset. ... ACLRESET will fix the permissions but will not fix the keys. ... SMS Inventory Data Loader has moved this file to ...
    (microsoft.public.sms.admin)
  • Re: Problems creating keys under the HKEY_LOCAL_MACHINE in Windows XP
    ... into effect when describing NTFS file permissions... ... The registry operates in much the same way that NTFS ... those root keys. ... ADMINISTRATORS and AUTHENTICATED USERS. ...
    (microsoft.public.vb.winapi)
  • Re: Non admin users cant do things they need to do
    ... You mean they are along with the registry entires? ... i added the keys below to the registry (as administrator) logged off, ... can set the time then they can fake out system event logs by changing ...
    (microsoft.public.windowsxp.embedded)
  • Re: Registry Cleaning?
    ... applications use the registry. ... keys and values, they look for or ask to read or write to *specific* keys or values or to verify their presence, the number of keys or values present makes no difference at all because none of these other keys are even looked at. ... These kinds of exaggerations and bogus claims are often made by those who push the need for registry cleaners or those who otherwise believe that these cleaners are useful. ...
    (microsoft.public.windows.vista.general)
  • Re: 0x80070005 Installation Failure message
    ... I wonder why Microsoft ... it had different permissions than other ... Before you modify the registry, ... > one or more registry keys could not be deleted ...
    (microsoft.public.windowsupdate)