Registry key not inheriting permissions

[Guest]

We are trying to install the latest version of Sophos AV from Sophos
management console to 1500 workstations running a mix of XP SP1 & 2.
(We've had to stop our upgrade plan to SP2 because of the problem)
From the Sophos management console, we install to the PC, which creates a
Registry key.
Unfortunately there are no permissions set on the key (by default registry
permissions are set to everyone and this should be inherited in all subkeys)
This causes the Sophos installation to stop.
Anyone got any ideas.
We don't want to run an MSI for installation.

 

[Steven L Umbach]

I don't know the direct answer but with that large a purchase I would think
Sophos support should help you out. You can use Group Policy to manage
registry key permissions if you want to give that a try. Look under computer
configuration/Windows settings/security settings - registry. However if you
want to try that I would NOT do it at the domain level but at an OU level
under the domain level so as to not potentially affect domain controllers
and as always it would be best to try a test OU first with a few computers
in it. If the registry key is not shown when you try to browse to it when
setting permissions you can simply type it in and then it will apply to
computers that have that registry key.

Steve

http://technet2.microsoft.com/Windo...b382-49c7-b184-a4cc888be5251033.mspx?mfr=true
http://www.windowsecurity.com/articles/Securing_the_Windows_2000_Registry.html

 

[Guest]

Thanks Stev, we thought that about Sophos too, but we're still waiting on
their tech support guys figuring it out!!
We've already assigned the Group Policies that way, but we're upgrading from
an older version of Sophos to the newer version.
The installation installs the new key but permissions aren't inherited from
the level above and the install then fails.