How to grant read/write access to registry to a specific user

  • Thread starter Thread starter Ron
  • Start date Start date
R

Ron

Application vendor tells me that application user does not
have to be an administrator, but DOES have to have
read/write access to system registry. This is documented
in their knowledge base, but their support people do not
know how I go about doing this. Is it as simple as
changing the permissions on user.dat and system.dat to
give the specified user r/w access to those 2 files?
 
Application vendor tells me that application user does not
have to be an administrator, but DOES have to have
read/write access to system registry. This is documented
in their knowledge base, but their support people do not
know how I go about doing this. Is it as simple as
changing the permissions on user.dat and system.dat to
give the specified user r/w access to those 2 files?

Start->Run->Regedit. Browse to the key, right-click it, choose
permissions. You may have to choose "Advanced" from the permissions
window and deselect "Inherit from parent...". Upon doing that, you
should be able to set the permissions the way you need them.
 
One bit of warning, there is no explicit "write" permission for registry
acls. Instead you can give them full control or set more detailed ones
such as "Write Owner", "Set Value", etc by clicking the advanced button.

One bit of warning, by opening up these permissions you will be laxing the
security of the registry under HKLM\System to allow untrained users to make
modifications that could be damaging.

blim
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| >From: "dkg_ctc" <[email protected]>
| >Newsgroups: microsoft.public.windowsxp.security_admin
| >Subject: Re: How to grant read/write access to registry to a specific
user
| >Date: Tue, 30 Dec 2003 21:46:30 -0000
| >Organization: Posted via Supernews, http://www.supernews.com
| >Message-ID: <[email protected]>
| >References: <[email protected]>
| >User-Agent: Xnews/06.08.25
| >X-Complaints-To: (e-mail address removed)
| >Lines: 15
| >Path:
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.su
l.t-online.de!t-online.de!newsfeed.icl.net!newsfeed.fjserv.net!proxad.net!ne
ws-out.visi.com!petbe.visi.com!sn-xit-02!sn-xit-01!sn-post-01!supernews.com!
corp.supernews.com!not-for-mail
| >Xref: cpmsftngxa07.phx.gbl
microsoft.public.windowsxp.security_admin:104730
| >X-Tomcat-NG: microsoft.public.windowsxp.security_admin
| >
| >| >
| >> Application vendor tells me that application user does not
| >> have to be an administrator, but DOES have to have
| >> read/write access to system registry. This is documented
| >> in their knowledge base, but their support people do not
| >> know how I go about doing this. Is it as simple as
| >> changing the permissions on user.dat and system.dat to
| >> give the specified user r/w access to those 2 files?
| >
| >Start->Run->Regedit. Browse to the key, right-click it, choose
| >permissions. You may have to choose "Advanced" from the permissions
| >window and deselect "Inherit from parent...". Upon doing that, you
| >should be able to set the permissions the way you need them.
| >
 
Back
Top