One bit of warning, there is no explicit "write" permission for registry
acls. Instead you can give them full control or set more detailed ones
such as "Write Owner", "Set Value", etc by clicking the advanced button.
One bit of warning, by opening up these permissions you will be laxing the
security of the registry under HKLM\System to allow untrained users to make
modifications that could be damaging.
blim
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| >From: "dkg_ctc" <
[email protected]>
| >Newsgroups: microsoft.public.windowsxp.security_admin
| >Subject: Re: How to grant read/write access to registry to a specific
user
| >Date: Tue, 30 Dec 2003 21:46:30 -0000
| >Organization: Posted via Supernews,
http://www.supernews.com
| >Message-ID: <
[email protected]>
| >References: <
[email protected]>
| >User-Agent: Xnews/06.08.25
| >X-Complaints-To: (e-mail address removed)
| >Lines: 15
| >Path:
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.su
l.t-online.de!t-online.de!newsfeed.icl.net!newsfeed.fjserv.net!proxad.net!ne
ws-out.visi.com!petbe.visi.com!sn-xit-02!sn-xit-01!sn-post-01!supernews.com!
corp.supernews.com!not-for-mail
| >Xref: cpmsftngxa07.phx.gbl
microsoft.public.windowsxp.security_admin:104730
| >X-Tomcat-NG: microsoft.public.windowsxp.security_admin
| >
| >| >
| >> Application vendor tells me that application user does not
| >> have to be an administrator, but DOES have to have
| >> read/write access to system registry. This is documented
| >> in their knowledge base, but their support people do not
| >> know how I go about doing this. Is it as simple as
| >> changing the permissions on user.dat and system.dat to
| >> give the specified user r/w access to those 2 files?
| >
| >Start->Run->Regedit. Browse to the key, right-click it, choose
| >permissions. You may have to choose "Advanced" from the permissions
| >window and deselect "Inherit from parent...". Upon doing that, you
| >should be able to set the permissions the way you need them.
| >