Registry key error after installing SP4

[Joy Wang]

Service Pack 4 is installed on Windows 2000 Pro. Domain
user receive an error "Failed to create key
Software\Microsoft\Windows\CurrentVersion\Run" after log
on. Is this related to registry permissions on domain
user accounts? How do you fix it?

 

[Joy Wang]

I granted domain users full control on the CurrentVersion
key and the error disappeared. Is there a security risk
on doing so?

 

[Joy Wang]

I granted domain users full control on the CurrentVersion
key and the error disappeared. Is there a security risk
on doing so?

 

[Mark V]

Joy Wang wrote in

I granted domain users full control on the CurrentVersion
key and the error disappeared. Is there a security risk
on doing so?

It is unclear what is attempting to create the "RUN" key (or modify
it's contents) That should be determined first IMO. It may possibly
be something undesireable.

It is also unclear whether this is a
HKEY_CURRENT_USER\...\Run\ or
HKEY_LOCAL_MACHINE\...\Run\
key issue.

HKLM\...\Run\ typically grants R access only to the (local) Users
Group. HKCU\...\Run\ OTOH typically has FULL for the logged user
account. IIRC

 

[Mark V]

Joy Wang wrote in

I granted domain users full control on the CurrentVersion
key and the error disappeared. Is there a security risk
on doing so?

It is unclear what is attempting to create the "RUN" key (or modify
it's contents) That should be determined first IMO. It may possibly
be something undesireable.

It is also unclear whether this is a
HKEY_CURRENT_USER\...\Run\ or
HKEY_LOCAL_MACHINE\...\Run\
key issue.

HKLM\...\Run\ typically grants R access only to the (local) Users
Group. HKCU\...\Run\ OTOH typically has FULL for the logged user
account. IIRC