Registry Permissions

[Guest]

Hi,

I have removed all permissions from "Default Configuration Permissions" of
"Default Security" tab.
When I tried to assign again, it is saying "You have been denied access to
some resource".

Also I can't see anything under "HKEY_CLASSES_ROOT" in registry.
I think it is some wat related to registry "HKEY_CLASSES_ROOT" Permissions.

Also I am not able to access IIS web server.
Due to that some other application also not responding properly.

Kindly Guide me in restoring the default permissions for "Default
Configuraton Permissions" tab of "DOMCNFG.EXE".

Thanks in advance.

Pratap

 

[Roger Abell [MVP]]

From what you have stated I assume your change was made
in dcomcnfg (not domcnfg as stated) and that you are speaking
of a Windows 2000 machine.

What you appear to have done, by clearing the default config
permissions in dcomcnfg is to remove all grants on the reg key
HKCR, and hence all permissions on any classes' keys that
are purely inherited from HKCR.

So, your task is to find a way to reset those permissions to
what they were (or at least admins and system full to start
with) that does not depend on those permissions on keys of
classes. Any admin account should be able to do this as the
Administrators group is owner of the key.

Just FYI HKCR on W2k server appears to have default perms
Creator Owner Full for Subkeys only
all other grants are for This key and subkeys
Administrators and System have Full
Users and Everyone have Read
Power Users and Terminal Server User have the same Special
grant, which is allow all parts of the ACE mask except for the
three: Create Link, Write DAC, Write Owner

On W2k can you edit the permissions of HKCR to replace
these by use of regedt32 ? or does it depend on components
that have default permissions inherited from HKCR ??

Roger