Control file and registry permissions on clients via GPO's?

  • Thread starter Thread starter Björn Johansson
  • Start date Start date
B

Björn Johansson

Hello all,

We have this thing that seems to be unique for us: Domain users (non-admins)
can't write to registry on some applications (Office 2000, Neonet and
Bloomberg for example) and therefore the applications will not work until we
change the permissions (And the keys are HKLM\Software\%application%) with
regedt32. How can I set theese permissions from a Group Policy?

Thanks in advance :)

/BJ

ps. All clients and servers Windows 2000 SP4 with GPO to lock workstation.
 
Hello Bjorn,

You can create a login script, assign it to the computer as a Startup
script in a new GPO. Script Subinacls (resource kit utility) to modify the
permissions of the HKLM portion of the registry.

All the resource kit tools (and others) are now online go to
http://www.microsoft.com/windows2000/downloads/tools/default.asp
to get your tools whenever you need them.

eg. "subinacl /keyreg <hkey_local_machine\software\microsoft....>
/grant=<domainname\groupname>

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Ah, thats the only way? Oki no wonder I did not find any related settings in
Users and computers :)

Thanks a bunch :)

/BJ
 
Back
Top