Give user acces to regkeys

[Guest]

Archived from groups: microsoft.public.security,microsoft.public.win2000.security (More info?)

Hello,

Is there a way to give a user write access to a LOCAL_MACHINE regkey without
making him local administrator?

And if Yes, how could it be done?


--
Jean Paul
-------------------------------------------------------------------------------------
C# is Second finger high on the A

 

[Guest]

Archived from groups: microsoft.public.security,microsoft.public.win2000.security (More info?)

jean.paul wrote:
> Is there a way to give a user write access to a LOCAL_MACHINE regkey
> without making him local administrator?
>
> And if Yes, how could it be done?

Use REGEDIT (REGEDT32 in previous to Windows XP versions of Windows) to set
the permissions on the Key and SubKeys appropriately.

--
<- Shenan ->
--
The information is provided "as is", it is suggested you research for
yourself before you take any advice - you are the one ultimately
responsible for your actions/problems/solutions. Know what you are
getting into before you jump in with both feet.

 

[Guest]

Archived from groups: microsoft.public.security,microsoft.public.win2000.security (More info?)

Doesn't giving the user write permission on the key, with regedt32 (right
click on the key), work?

"jean-dot-paul-at-opelwilly-dot-com" <i@a> a écrit dans le message de news:
OMfQoA1wEHA.2876@TK2MSFTNGP12.phx.gbl...
> Hello,
>
> Is there a way to give a user write access to a LOCAL_MACHINE regkey
> without making him local administrator?
>
> And if Yes, how could it be done?
>
>
> --
> Jean Paul
> -------------------------------------------------------------------------------------
> C# is Second finger high on the A
>
>
>

 

[Guest]

Archived from groups: microsoft.public.security,microsoft.public.win2000.security (More info?)

You have been told the how to.

You should however consider well before taking
this action. Not even Administrators have that grant
in the default condition, and it is so for a reason.

Granting that to an account allows that account to
basically destroy the install, and to adjust/circumvent
numerous things having less total impact.

It is far better to determine the minimal amount of
subkey area down within to which the grant is then
made in order to enable what and only what is needed.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"jean-dot-paul-at-opelwilly-dot-com" <i@a> wrote in message
news:OMfQoA1wEHA.2876@TK2MSFTNGP12.phx.gbl...
> Hello,
>
> Is there a way to give a user write access to a LOCAL_MACHINE regkey
without
> making him local administrator?
>
> And if Yes, how could it be done?
>
>
> --
> Jean Paul
> --------------------------------------------------------------------------
-----------
> C# is Second finger high on the A
>
>
>