registry permission changes

  • Thread starter Thread starter Will Kubly
  • Start date Start date
W

Will Kubly

Hi

Where I work we seem to have issues where the users permission to
registry keys change. So suddenly we have an application issue on a few
PCs that I tracked down to the registry key permission changes.
Basically they don't have rights to that area of the registy. They used
to, other PCs still do.

Any idea what is going on here?

Thanks

Will
 
Assuming these are really admin users, as would be expected for a registry change, you are probably seeing a relic of a previous
change by one of the admin group. The default behavior for XP is the creation of 'owner objects' I would guess that you have not
made the change in Policy to allow 'admin group' object creation, and in effect you might say you are suffering from 'over
administration'.

Depending on your situation, you could consider changing Policy, rather than taking control of the registry permissions

Go to Start/Run, and type : GPEDIT.MSC
Local Computer Policy> Computer Configuration> Windows Settings> Security Settings> Local Policies> Security Options> System
Objects:
"Default owner for objects created by members of the Administrators Group. "

Set this to "Administrators group" instead of "Object Creator".
 
What does this do for application installs? Create those keys in all
user hives? Or just give the users access to those keys?

I was getting this on NT as well in the past. Currently no Windows 2000
server just NT domains. I will check local policy. I was hoping moving
to 2000 or XP would mean this issue disappeared but it did not.
 
No, it's just a permissions change. The same keys are going to generate in either case.
 
Back
Top