TS Clients editing TS registry

[gurvinder.nijjar]

We are running Terminal services and mainly have terminal server clients.
We want to implement a change for the terminal server users whereby we want
to add a registry change under local user when they log into the terminal
server. We have put this change in the users login script. But when the
user logs into the TS and the script tries to make the change in the
registry it comes up with access denied as the user does not have
permissions to edit the registry. We have set less restirction in the group
policy for the TS users but still does not work. If we give users local
admin rights to the TS it works, but we do not want to do this. Is there
any way round this where TS users can edit the registry on the terminal
server.

 

[Vera Noest [MVP]]

There is no such registry hive as "local user". It's either
KHEY_LOCAL_MACHINE or HKEY_CURRENT_USER.

Since you describe access denied problems, I'll assume that you
want the users to modify a key in HKEY_LOCAL_MACHINE (users
normally do have write permissions to their own profile in
HKEY_CURRENT_USER).
You can open the registry with regedt32 and change the permissions
on individual registry keys.
But is this really what you want? Since all users will be writing
to the same key, the last user to logon will "win"!