Page 1 of 1 1
Topic Options
#119067 - 2004-05-05 07:46 PM Writing registry keys with no local admin
Ash Offline
Fresh Scripter

Registered: 2004-05-05
Posts: 9
All,

Newbie here, written some reasonable level KIX over the last year, with lots of help from the scripts library on the site - but now need help.

In our network login script i want to write a value to a registry key (win2000 & XP), but the users don't have local admin and we have 'locked' down the machines such that the command fails if they don't have this privilege level. It works great for me since i have admin rights, but no other users. Is there a way of getting round this?

Many thanks

Top
#119068 - 2004-05-05 07:53 PM Re: Writing registry keys with no local admin
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
first way is to go around.
why you need to write to the reg?
why can't the need be erased?
_________________________
!

download KiXnet

Top
#119069 - 2004-05-05 09:07 PM Re: Writing registry keys with no local admin
Ash Offline
Fresh Scripter

Registered: 2004-05-05
Posts: 9
Thanks. Need stems from an SAP install (need i say more). It uses an ini file to provide access to various instances of SAP, and the reference to the ini file is in the registry. I want it to update to which the correct version depending on who logs onto the machine, i.e. so people can roam. No real way round other than unlocking the machines, giving all 800 employees admin(!) or ensuring they always use the same PC - none of which is really feasible.

I thought i read on a post that you can reference a Kix script as part of the PC login script that runs as admin (ironically through another registry entry) - if so i could split the login script in to two parts? Or am i way off here?

Many thanks

Top
#119070 - 2004-05-05 10:35 PM Re: Writing registry keys with no local admin
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
You could write and admin script to set the ACL on the portion of the registry the users need to write to.
Top
#119071 - 2004-05-06 02:51 PM Re: Writing registry keys with no local admin
Ash Offline
Fresh Scripter

Registered: 2004-05-05
Posts: 9
Chris,

Thanks for that. Sounds like a plan - only question you could help me with further is - where in the registry are the ACL's set to enable access to the registry (sounds vaguely chicken and egg!) Thanks in advance.

Ash

Top
#119072 - 2004-05-06 02:59 PM Re: Writing registry keys with no local admin
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
It is not a question of "Where". You need to use a utility like SubInACL to tweak reg perms.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#119073 - 2004-05-06 03:43 PM Re: Writing registry keys with no local admin
GSUK Offline
Starting to like KiXtart

Registered: 2004-03-10
Posts: 125
I had a similar problem where I needed to write to an HKLM key as I only wanted a script to run once and not everytime different people logged on. There is a program called regini.exe (part of the 2000 resoure kit). You can call this in a startup file before the user logs in. This exe allows you to edit the permissions of keys allowing users to write to them. A very useful tool!!!!

Hope this helps

Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 2220 anonymous users online.
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.071 seconds in which 0.04 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org