RE: GPEDIT + Workstation Registry

Hello Chris,

Thank you for posting here.

According to your description, I understand that you want to delivery
registry key permissions via Group Policy. If I have misunderstood the
problem, please don't hesitate to let me know.

Based on my research, I suggest we try the following steps to see if we can
resolve this issue:

1. Start Server Management console, extend Advanced Management->Group
Policy Management->Forest: domain.local->Domains->domain.local

2. Right-click the domain.local, and then click Create and Link a GPO Here.


3. Input the GPO name, click OK

4. Right click the new GPO in left pane, select Edit.

5. Expand Computer Configuration, Windows Settings, Security Settings, and
then click Registry.

7. Right-click in the right pane, and then click Add Key .

8. Find the key your want to change permission, and then click OK

Note that there may be a delay before you can proceed to the next step, and
this is normal.

9. The Database Security Editor appears. You need to add Domain Users and
make everyone only have Read permission. Click OK.

10. Click OK twice to complete the settings and exit the Group Policy
Editor.

11. Log off and log on one time on client, then test this issue.

Hope info above will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: GPEDIT + Workstation Registry
| thread-index: AccjtABWdo50BXOYQH289JOxKJgRQw==
| X-WBNR-Posting-Host: 87.102.15.211
| From: =?Utf-8?B?Q2hyaXM=?= <Chris@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: GPEDIT + Workstation Registry
| Date: Tue, 19 Dec 2006 13:24:01 -0800
| Lines: 13
| Message-ID: <3BCE0761-A07D-4163-AFFD-AC7C5ED522FF@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2757
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:5398
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi,
|
| All the PCs in our SBS2003 network have a particular piece of software
| installed. Each PC has an identical registry entry but due to the high
levels
| of security they don't have write access to it, only read access. Without
| going round the 100s of PCs and manually changing the registry key
| permissions, is there a quicker and simpler way to allow write access to
this
| registry entry on ALL the PCs, for any user, maybe using Group Policy
Editor
| (gpedit)?
|
| Thanks
|
| Chris
|

.

Relevant Pages

  • RE: services running in windows domain (winXP clients)
    ... registry changes and permissions. ... i mean if someone is administrator can change the ... (Maybe create a group policy setting this ...
    (Focus-Microsoft)
  • Re: How do I make registry changes stick?
    ... caused a duplicate but set of permissions to appear in the box. ... In the Registry Editor, right click.. ... take ownership of the registry key by the current owner. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: How do I make registry changes stick?
    ... MS-MVP Windows Shell/User ... I found that the permissions for the key were and on the ... In the Registry Editor, right click.. ... take ownership of the registry key by the current owner. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: How do I make registry changes stick?
    ... MS-MVP Windows Shell/User ... I found that the permissions for the key were and on the ... In the Registry Editor, right click.. ... To assign permissions to a registry key ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Cannot Delete Registry Key
    ... > to the permissions on the bad key, ... >> [[Incorrectly editing the registry may severely damage your system. ... >> take ownership of the registry key by the current owner. ... >> MS-MVP Windows Shell/User ...
    (microsoft.public.windowsxp.security_admin)
Loading