Re: Enable users to modify Protected Registry Keys

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/09/04 

Date: Tue, 9 Mar 2004 07:27:18 -0700

What I referred to as the policy engine is the code on the client
side that is responsible for enforcing the defined policies.
What is it that you are trying to accomplish.
I mean, not "I am trying to change the permissions on these keys"
but, "I want to allow plain users too . . . which lead me to believe
that if I changed permissions on the policy keys . . . "
We need to know what you are after so that we can find how to
work with the system to accomplish it, instead of swimming up stream. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Cathy Milan" <cathymilan@excite.com> wrote in message
news:OpDAucYBEHA.2628@TK2MSFTNGP11.phx.gbl...
> As you have probably figured out - I am new at this.  What exactly is the
> policy engine?
> Can I add these changes in permissions to the policy engine?
>
> Cathy
>
>
>
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:e9yp2gXBEHA.1600@tk2msftngp13.phx.gbl...
> > That would be a pretty poor idea as these keys are what the system
> > uses to enforce policy.  At any rate, most changes that an account
> > makes into those "policy" sets of keys are subject to being reset
> > when the policy engine applies policy.
> > Perhaps you can narrow down just which keys are giving you an
> > issue.  Changing the permissions at the higher level you have stated
> > is however ill-advised.
> >
> > -- 
> > Roger Abell
> > Microsoft MVP (Windows Server System: Security)
> > MCSE (W2k3,W2k,Nt4)  MCDBA
> > "Cathy Milan" <cathymilan@excite.com> wrote in message
> > news:uWKXfbXBEHA.3348@TK2MSFTNGP11.phx.gbl...
> > > By default users are not able to modify registry keys under
> > >
> > > HKCU\Software\Microsoft\Windows\CurrentVersion\Policies
> > >
> > > What code or function would I be able to use so that all
> > > users would be able to modify those keys?
> > >
> > > Thanks in advance.
> > >
> > > Cathy
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: enable SE_TAKE_OWNERSHIP privilege
    ... The two current .\Policy subtrees are volatile. ... The policy engine refreshes the values based on ... > Is there no way to edit or add keys by code from a ... >>> does not carry over to the limited user. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: enable SE_TAKE_OWNERSHIP privilege
    ... Is there no way to edit or add keys by code from a ... When the policy engine is changing ... >> does not carry over to the limited user. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Enable users to modify Protected Registry Keys
    ... Can I add these changes in permissions to the policy engine? ... > That would be a pretty poor idea as these keys are what the system ... >> By default users are not able to modify registry keys under ...
    (microsoft.public.windows.group_policy)