changing registry permissions via gpo?

Discussion in 'Server Security' started by Andre, Oct 23, 2004.

  1. Andre

    Andre Guest

    How is it possible to add Group Rights to a Registry Key?

    We have a group of users that need Full Access to a Registry Key.

    Is is possible to do via Group Policy or Command Line?


    Andre, Oct 23, 2004
    1. Advertisements

  2. You can set registry permissions via Group Policy/security policy. It is a
    computer configuration. Create a GPO and the look under computer
    configuration/Windows settings/security settings/registry - select add new
    key and configure security appropriately. -- Steve
    Steven L Umbach, Oct 23, 2004
    1. Advertisements

  3. Andre

    Andre Guest

    Thanks but this as to be set to LOCAL_USER,
    Now, one more thing is that I also try to set this up for TS as well.

    Andre, Oct 23, 2004
  4. Then you likely need third-party extension to GP in order to
    do this via GP. The Registy permissions in a GP are stored
    as SDDI strings, with the principals pre-digested into a SID or
    into an abbreviation for the well-knowns. Your LOCAL_USER
    would have a unique sid on each target machine if it is not a
    pre-defined principal.
    Roger Abell [MVP], Oct 24, 2004
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.