Registry Keys, Permissions and GPO

[Guest]

Is there anyway to save a Registry Key in such a manner that the Key and its
Permissions, preferably the Advanced Permissions, can be sent out via GPO?

I've been trying to make a Key with RegtoAdm but I haven't yet been able to
get permissions into the Key.

Can .adm files even hold permissions? What does one look like with
permissions?

thanks.

 

[Darren Mar-Elia \(MVP\)]

Unfortunately, ADMs don't support registry permissions. You might look at
the old regdmp and regini utilities that, if I remember correctly, are part
of the reskit. Regdmp can create regini formatted files that do include
perms. Then you can monkey with the regini file to modify perms and then use
a GP-based computer startup or user logon script to deliver the regini
script.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
And, the Windows Group Policy Guide is out from Microsoft Press!!! Check it
out at http://www.microsoft.com/mspress/books/8763.asp
GPOGUY Blog: http://blogs.dirteam.com/blogs/gpoguy

 

[Dave Britt]

Whilst as Darren say's there is no native support for this, what you could
do is write a simple vbscript to create the Registry key that you want as
part of a machine startup or logon script.

Once the key is in place you can use registry security through GPO to apply
security to the registry key.

Computer Configuration\Windows Settings\Security Settings\Registry


--
Dave Britt

Dave's Weblog
http://davebritt.blogspot.com