Joining AD Domain, and Registry permission



Hello

I have encountered a problem when joining an AD domain with WinXP Pro.
Basically before joining using the local administrator account everything
works fine, applications can be installed registry permissions are all
correct.

Now if i join a domain and enter my AD username to the local administrators
account the registry permissions seem to change. No changes have been made to
the Domain sec policy on the ADC. If i attempt to install a certain
application (which will install when not joined to the domain) i am thrown
1402 permission errors from the MSI installer.

Manually checking the keys it shows that there are no permissions for
administrators, or the respective user. I have see these characterists with
many application installations and even applications which need to make
changes during runtime (IE itunes when it wants to update the file type
associations).

When i go to hkeyLM/software and set the owner again (clicking on the tick
box) it complains that it is unable to set the owner on all subfolder keys.

Is there something i am missing here, perhaps an AD policy i have got to edit?

Anyway any input would be gratefully received :)

Many Thanks
.



Relevant Pages

  • Re: Question on software install and event log security
    ... There is no deny user right for manage auditing and security log but if the ... install all .msi packages even if the user is not a local administrator. ... >> local administrator could not change that user right via Local Security ... >>> local administrator group, therefore allowing all users to install ...
    (microsoft.public.windows.group_policy)
  • RE: Users and Groups
    ... Template of the Users and Computers Wizard. ... even Server assigned Apps applied via Users and Computers on SBS. ... but usually associated with inability to install ... Local Administrator. ...
    (microsoft.public.windows.server.sbs)
  • Re: Power User Account corrupted?
    ... Are you sure these programs do not need you to be a local administrator? ... If other power users that are not also local administrators can install them ... to folders as powers users on the computers where it works. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problems logging on in safe mode
    ... In that case create the Local administrator profile and login using it to install. ... I can log in under safe mode with networking but that does not allow me to install Registry Mechanic 5.2. ...
    (microsoft.public.windowsxp.general)
  • Re: Question on software install and event log security
    ... to install software continuously throughout the day. ... The policy only allows. ... > those packages to be installed without the user being local administrator. ... >> However by adding them to the local administrator group they are allowed ...
    (microsoft.public.windows.group_policy)