Registry Permissions Question

[Guest]

Hi everyone

I have XP Pro SP2 and wanted to allow Limited Users to change their own
Power Configuration. I found some information regarding changing the
permission of a couple of keys in
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Controls Folder\PowerCfg. The
instructions were to Add a user <INTERACTIVE> then change the permission of
this user to Allow - "Set value" and "Create Subkey".

I've done this and it works perfectly, but the question I have is why add a
user called <INTERACTIVE>? If I had known these were the keys that I needed
to change permissions, I would probably have added the specific Limited Users
(by name) and set the permissions in that way. Does <INTERACTIVE> refer to
all users? I already have a user by the name <USERS>, although the key
permissions are each simply read, rather than the settings above. Could I
have changed the permissions of USERS, rather than add <INTERACTIVE>?

Thanks for your time.

 

[Guest]

You need to be carefull when you work with regedit. Because you can produce
by accident an exploit. Save your settings before doing any.
the best way is creating by user, and don't give full control of the system.

 

[Guest]

Thank you.

It's just two keys that I've granted the right for <INTERACTIVE> to "Set
value" and "Create Subkey". I'm intrigued as to why <INTERACTIVE> was
recommended, rather than name the Limited users explicitly. As I mentioned,
everything works as I want. I'm quite prepared to remove the <INTERACTIVE>
and do what I felt that I should do instinctively by naming the Limited users.

As a matter of interest, I run System Restore and backup that part of the
registry where I'm working before I do any tweaking! Touch wood, I've never
had to fall back on either of these when I've finished tweaking.