Archived from groups: microsoft.public.windowsxp.customize (More info?)

Hi,

I am a computer lab technician at Gonzaga University. I manage 150
computers all using winXP sp2 in a lab setting. We are trying to use a
microsoft product called winexit.exe. I have installed the new version for
XP. We are on an active directory system here. We use to have no problem
when our lab computers were running Win2000, and our users were all in the
administrators group. Now we have tightened up security by placing all our
users in the power users group.

Also, we used to set our winexit.exe screen saver settings logged on as
administrator then copy our administrator profile over our default user
profile.

When we try to rely on the default user profile now to initiate winexit.exe,
nothing happens. So we have gone to trying to use the group policy settings
in active directory. We have had a minor success with that. As long as an
administrator is logged on, winexit works properly. But when someone in the
power users group is logged on, winexit fails when it attempts to log them
off. An error message appears that says:
Error encountered while creating registry key. Make sure you have Set Value
and Create Subkey permissions.

Once we click "OK" on that, the log off continues properly.

I have tried adding the power users group to all the main registry keys and
editing the permissions to include those permissions, but it still happens.

I am open to having any kind of auto log off that will work consistently
with new profiles on an active directory, WinXP sp2 system.

Can anyone help me?

--
Rob

"Eddies in the space/time continuum"
Ford Prefect

Archived from groups: microsoft.public.windowsxp.customize (More info?)

Adding to what Doug said:

Winexit.scr always causes this error when run from a restricted user
account. Here is the information you need:

http://www.jsiinc.com/SUBc/tip1100/rh1179.htm

HKEY_Local_Machine\Software\Microsoft\Windows
NT\CurrentVersion\IniFileMapping\Control.ini

BTW, the solution is to set appropriate permissions for the registry key
discussed in that article. You can find more information about registry
permissions in this article:

How To Use the Windows XP and Windows Server 2003 Registry Editor Features:
http://support.microsoft.com/?kbid=310426

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"ArrrghBob" <ArrrghBob@discussions.microsoft.com> wrote in message
news:6313C3C4-15A6-445F-BCC4-3645FDF5FCA0@microsoft.com...
> Hi,
>
> I am a computer lab technician at Gonzaga University. I manage 150
> computers all using winXP sp2 in a lab setting. We are trying to use a
> microsoft product called winexit.exe. I have installed the new version
> for
> XP. We are on an active directory system here. We use to have no problem
> when our lab computers were running Win2000, and our users were all in the
> administrators group. Now we have tightened up security by placing all
> our
> users in the power users group.
>
> Also, we used to set our winexit.exe screen saver settings logged on as
> administrator then copy our administrator profile over our default user
> profile.
>
> When we try to rely on the default user profile now to initiate
> winexit.exe,
> nothing happens. So we have gone to trying to use the group policy
> settings
> in active directory. We have had a minor success with that. As long as
> an
> administrator is logged on, winexit works properly. But when someone in
> the
> power users group is logged on, winexit fails when it attempts to log them
> off. An error message appears that says:
> Error encountered while creating registry key. Make sure you have Set
> Value
> and Create Subkey permissions.
>
> Once we click "OK" on that, the log off continues properly.
>
> I have tried adding the power users group to all the main registry keys
> and
> editing the permissions to include those permissions, but it still
> happens.
>
> I am open to having any kind of auto log off that will work consistently
> with new profiles on an active directory, WinXP sp2 system.
>
> Can anyone help me?
>
> --
> Rob
>
> "Eddies in the space/time continuum"
> Ford Prefect

Archived from groups: microsoft.public.windowsxp.customize (More info?)

Thank you so much Doug!!
--
Rob

"Eddies in the space/time continuum"
Ford Prefect


"Doug Knox MS-MVP" wrote:

> From:http://www.tburke.net/info/reskittools/topics/winexit.htm
>
> In order for non-administrators to be able to use WinExit, you must add Set Value and Create Subkey permissions for the group Everyone on the registry key:
>
> HKEY_Local_Machine\Software\Microsoft\Windows NT\CurrentVersion
>
> --
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/x [...] onsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>
> "ArrrghBob" <ArrrghBob@discussions.microsoft.com> wrote in message news:6313C3C4-15A6-445F-BCC4-3645FDF5FCA0@microsoft.com...
> > Hi,
> >
> > I am a computer lab technician at Gonzaga University. I manage 150
> > computers all using winXP sp2 in a lab setting. We are trying to use a
> > microsoft product called winexit.exe. I have installed the new version for
> > XP. We are on an active directory system here. We use to have no problem
> > when our lab computers were running Win2000, and our users were all in the
> > administrators group. Now we have tightened up security by placing all our
> > users in the power users group.
> >
> > Also, we used to set our winexit.exe screen saver settings logged on as
> > administrator then copy our administrator profile over our default user
> > profile.
> >
> > When we try to rely on the default user profile now to initiate winexit.exe,
> > nothing happens. So we have gone to trying to use the group policy settings
> > in active directory. We have had a minor success with that. As long as an
> > administrator is logged on, winexit works properly. But when someone in the
> > power users group is logged on, winexit fails when it attempts to log them
> > off. An error message appears that says:
> > Error encountered while creating registry key. Make sure you have Set Value
> > and Create Subkey permissions.
> >
> > Once we click "OK" on that, the log off continues properly.
> >
> > I have tried adding the power users group to all the main registry keys and
> > editing the permissions to include those permissions, but it still happens.
> >
> > I am open to having any kind of auto log off that will work consistently
> > with new profiles on an active directory, WinXP sp2 system.
> >
> > Can anyone help me?
> >
> > --
> > Rob
> >
> > "Eddies in the space/time continuum"
> > Ford Prefect
>

Archived from groups: microsoft.public.windowsxp.customize (More info?)

Thank you sincerely, Ramesh, you were extremely helpful!!!
--
Rob

"Eddies in the space/time continuum"
Ford Prefect


"Ramesh, MS-MVP" wrote:

> Adding to what Doug said:
>
> Winexit.scr always causes this error when run from a restricted user
> account. Here is the information you need:
>
> http://www.jsiinc.com/SUBc/tip1100/rh1179.htm
>
> HKEY_Local_Machine\Software\Microsoft\Windows
> NT\CurrentVersion\IniFileMapping\Control.ini
>
> BTW, the solution is to set appropriate permissions for the registry key
> discussed in that article. You can find more information about registry
> permissions in this article:
>
> How To Use the Windows XP and Windows Server 2003 Registry Editor Features:
> http://support.microsoft.com/?kbid=310426
>
> --
> Ramesh, Microsoft MVP
> Windows XP Shell/User
> http://windowsxp.mvps.org
>
>
> "ArrrghBob" <ArrrghBob@discussions.microsoft.com> wrote in message
> news:6313C3C4-15A6-445F-BCC4-3645FDF5FCA0@microsoft.com...
> > Hi,
> >
> > I am a computer lab technician at Gonzaga University. I manage 150
> > computers all using winXP sp2 in a lab setting. We are trying to use a
> > microsoft product called winexit.exe. I have installed the new version
> > for
> > XP. We are on an active directory system here. We use to have no problem
> > when our lab computers were running Win2000, and our users were all in the
> > administrators group. Now we have tightened up security by placing all
> > our
> > users in the power users group.
> >
> > Also, we used to set our winexit.exe screen saver settings logged on as
> > administrator then copy our administrator profile over our default user
> > profile.
> >
> > When we try to rely on the default user profile now to initiate
> > winexit.exe,
> > nothing happens. So we have gone to trying to use the group policy
> > settings
> > in active directory. We have had a minor success with that. As long as
> > an
> > administrator is logged on, winexit works properly. But when someone in
> > the
> > power users group is logged on, winexit fails when it attempts to log them
> > off. An error message appears that says:
> > Error encountered while creating registry key. Make sure you have Set
> > Value
> > and Create Subkey permissions.
> >
> > Once we click "OK" on that, the log off continues properly.
> >
> > I have tried adding the power users group to all the main registry keys
> > and
> > editing the permissions to include those permissions, but it still
> > happens.
> >
> > I am open to having any kind of auto log off that will work consistently
> > with new profiles on an active directory, WinXP sp2 system.
> >
> > Can anyone help me?
> >
> > --
> > Rob
> >
> > "Eddies in the space/time continuum"
> > Ford Prefect
>
>