Admin Rights issue

[Bongard]

I am an administrator of a small network and I have a question about
how to allow users certain rights. I have a few users on our network
that I need to allow to use regedit and msconfig for installing and
managing different processes on their workstations. I logged onto
their computer with my admin rights and went to C:\WINDOWS
\system32\regedt32.exe and then added their user name and allowed
security rights for full control, modify, read &execute, read, and
write. Still when these users log on they do not have access to
editing registry values via regedit(in the run menu) or the
executeable . Also - I don't know where to look to allow a user to be
able to run msconfig on their system. Any help you can offer would be
much appreciated!

Thanks,
Brian

 

[Guest]

You can't do it. Running regedit is the same as being an admin. There is very
little an admin can do that the use of regedit could not also do.

 

[John Wunderlich]

I am an administrator of a small network and I have a question about
how to allow users certain rights. I have a few users on our network
that I need to allow to use regedit and msconfig for installing and
managing different processes on their workstations. I logged onto
their computer with my admin rights and went to C:\WINDOWS
\system32\regedt32.exe and then added their user name and allowed
security rights for full control, modify, read &execute, read, and
write. Still when these users log on they do not have access to
editing registry values via regedit(in the run menu) or the
executeable . Also - I don't know where to look to allow a user to be
able to run msconfig on their system. Any help you can offer would be
much appreciated!

You don't say what happens when you try to use regedit, but perhaps
this can help:

http://www.dougknox.com/security/scripts_desc/regtools.htm

-- John

 

[Bongard]

Thanks John I may give this a try tomorrow. When the user tries to
select regedit from their machine they get the message "Registry
editing has been disabled by your administrator" Does that help at
all, or is that pretty much the default message?

Thanks for your help!
Brian

 

[John Wunderlich]

Thanks John I may give this a try tomorrow. When the user tries to
select regedit from their machine they get the message "Registry
editing has been disabled by your administrator" Does that help at
all, or is that pretty much the default message?

Thanks for your help!
Brian

The fix I posted should solve this problem.
-- John