remote access to W2KPro Registry

[Jacek Komorowski]

Hi All,

In Regedit on WinXP machine I try unsuccessfuly to access the registry on a
remote (within
the same LAN) Win2K Pro machine which has Remote Registry Service running.
What particular config should be done ?

Regards,
Jacek

 

[Dave Patrick]

What happens when you try?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Jacek Komorowski" <jkomorowski(at)bigfoot.com> wrote in message
| Hi All,
|
| In Regedit on WinXP machine I try unsuccessfuly to access the registry on
a
| remote (within
| the same LAN) Win2K Pro machine which has Remote Registry Service running.
| What particular config should be done ?
|
| Regards,
| Jacek
|
|

 

[Jacek Komorowski]

Dave,

When I indicate, with MYGROUP\MYMACHINE, the remote Win2K Pro, it appears in
Regedit with two hives HKLM and HKUsers.
The hive HKUsers can be drilled down but not HKLM.
When I select HKLM key, I get the error message "Cannot open
HKEY_LOCAL_MACHINE. Error while opening key."

Regards,
Jacek

 

[Dave Patrick]

This article may help you.

http://support.microsoft.com/kb/q153183/

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Dave,
|
| When I indicate, with MYGROUP\MYMACHINE, the remote Win2K Pro, it appears
in
| Regedit with two hives HKLM and HKUsers.
| The hive HKUsers can be drilled down but not HKLM.
| When I select HKLM key, I get the error message "Cannot open
| HKEY_LOCAL_MACHINE. Error while opening key."
|
| Regards,
| Jacek

 

[Jacek Komorowski]

Thank you Dave,

My Win2K Pro machine has the name TREK and I log on it as JACEK (a
PowerUser)
The remote WinXP has the name SILVER and I log on it as TREK\JACEK.
After studying the article you pointed me to, I understood that in the
TREK's Registry I have to open the key

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
\AllowedPaths

and add the Value Users with the data identifying the user JACEK. That data
identifying JACEK should be a Registry path.

But I have no idea which Registry path should I use ?

Regards,
Jacek

 

[Dave Patrick]

If workgroup then make sure the account JACEK exists on the machine silver
and is a member of the local administrators group and that the machine's
user account passwords are in sync.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Thank you Dave,
|
| My Win2K Pro machine has the name TREK and I log on it as JACEK (a
| PowerUser)
| The remote WinXP has the name SILVER and I log on it as TREK\JACEK.
| After studying the article you pointed me to, I understood that in the
| TREK's Registry I have to open the key
|
|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
| \AllowedPaths
|
| and add the Value Users with the data identifying the user JACEK. That
data
| identifying JACEK should be a Registry path.
|
| But I have no idea which Registry path should I use ?
|
| Regards,
| Jacek

 

[Jacek Komorowski]

1. Does it mean that there is nothing to modify in TREK's Registry branch
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
\AllowedPaths ?

2. JACEK is not supposed to have on SILVER strong rights (e.g. local admin).
He is a user of an application which is loaded from TREK and which must
read/write infos in a particular branch of TREK's Registry HKEY_LM hive.

Regards,
Jacek

 

[Dave Patrick]

OK then add the desired path to the Reg_Multi_SZ value;
"Machine"
found at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg\AllowedPaths

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| 1. Does it mean that there is nothing to modify in TREK's Registry branch
|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
| \AllowedPaths ?
|
| 2. JACEK is not supposed to have on SILVER strong rights (e.g. local
admin).
| He is a user of an application which is loaded from TREK and which must
| read/write infos in a particular branch of TREK's Registry HKEY_LM hive.
|
| Regards,
| Jacek

 

[Jacek Komorowski]

So I return to my 3rd post in this thread.
Namely, according to the article http://support.microsoft.com/kb/q153183/
you have pointed me to, in TREK's Registry I have to open the key

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
\AllowedPaths

and add the value "Users" with the data identifying the user JACEK. That
data
identifying JACEK should be a Registry path. But I have *no idea* which
Registry path identifies a user, namely the user JACEK ?

Regards,
Jacek

OK then add the desired path to the Reg_Multi_SZ value;
"Machine"
found at
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
\AllowedPaths

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| 1. Does it mean that there is nothing to modify in TREK's Registry branch

|

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
| \AllowedPaths ?
|
| 2. JACEK is not supposed to have on SILVER strong rights (e.g. local
admin).
| He is a user of an application which is loaded from TREK and which must
| read/write infos in a particular branch of TREK's Registry HKEY_LM hive.
|
| Regards,
| Jacek

 

[Dave Patrick]

'Users' does not exist by default in Windows 2000 and later operating
systems. Add the key paths to 'Machine' should do it for you.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| So I return to my 3rd post in this thread.
| Namely, according to the article http://support.microsoft.com/kb/q153183/
| you have pointed me to, in TREK's Registry I have to open the key
|
|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
| \AllowedPaths
|
| and add the value "Users" with the data identifying the user JACEK. That
| data
| identifying JACEK should be a Registry path. But I have *no idea* which
| Registry path identifies a user, namely the user JACEK ?
|
| Regards,
| Jacek

 

[Jacek Komorowski]

But which "key path" should I add to the value named "Machine" ?
Honestly, I have no idea.

Regards,
Jacek

 

[Dave Patrick]

Earlier you said;

"He is a user of an application which is loaded from TREK and which must
read/write infos in a particular branch of TREK's Registry HKEY_LM hive"

Add those keys to 'Machine'

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| But which "key path" should I add to the value named "Machine" ?
| Honestly, I have no idea.
|
| Regards,
| Jacek

 

[Jacek Komorowski]

The TREK's Registry branch to be accessed is
HKEY_LOCAL_MACHINE\Software\OurCompany .
So I did the following steps :
1. Being logged on TREK as Admin, I went in TREK's Registry to the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
\AllowedPaths
and I added "Software\OurCompany" to the value named "Machine".
I did it without conviction that it's correct because I see no relation with
the user JACEK.
2. I logged on SILVER as TREK\JACEK
3. Still on SILVER, I launched Regedt32 and with "Connect Network
Registry" I connected to TREK's Registry.
4. TREK's two hives HKLM and HKUsers appeared in Regedt32 but when I
select HKLM key, I get the error message "Cannot open HKEY_LOCAL_MACHINE.
Error while opening key."

I must do something wrong, but what ?

Regards,
Jacek

 

[Dave Patrick]

http://www.microsoft.com/resources/...s/2000/server/reskit/en-us/regentry/46693.asp

You did restart for effect?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| The TREK's Registry branch to be accessed is
| HKEY_LOCAL_MACHINE\Software\OurCompany .
| So I did the following steps :
| 1. Being logged on TREK as Admin, I went in TREK's Registry to the key
|
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
| \AllowedPaths
| and I added "Software\OurCompany" to the value named "Machine".
| I did it without conviction that it's correct because I see no relation
with
| the user JACEK.
| 2. I logged on SILVER as TREK\JACEK
| 3. Still on SILVER, I launched Regedt32 and with "Connect Network
| Registry" I connected to TREK's Registry.
| 4. TREK's two hives HKLM and HKUsers appeared in Regedt32 but when I
| select HKLM key, I get the error message "Cannot open HKEY_LOCAL_MACHINE.
| Error while opening key."
|
| I must do something wrong, but what ?
|
| Regards,
| Jacek