Page 1 of 1 1
Topic Options
#153405 - 2005-12-14 11:00 PM Setting Registry Permissions
Harrild Offline
Lurker

Registered: 2005-12-14
Posts: 3
I've got a logon script for our domain, it's quite big (ok so its almost 50KB) so i won't post it. My problem is that for one particular user group i need to set permissions on a particular key so that outlook can be used by other programs. How do i do this?

I've tried
If @PRIV="USER"
@PRIV="ADMIN"
WriteValue("HKEY_CURRENT_USER\Software\Policies\Microsoft\Security", "CheckAdminSettings", "00000001", "REG_DWORD")
@PRIV="USER"
Endif

doesn't work.
I've almost tried using a 3rd party program but the program needs admin rights to perform the action.

Is there a way i can get Kix to either switch PRIV level and run the key or actually get Kix to give the User Full control over that particular key so that the account can run the key?

Top
#153406 - 2005-12-14 11:09 PM Re: Setting Registry Permissions
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
no, you can't.
the logon process is ran under current user rights, and thus you can't elevate the rights in that process.
_________________________
!

download KiXnet

Top
#153407 - 2005-12-14 11:16 PM Re: Setting Registry Permissions
Harrild Offline
Lurker

Registered: 2005-12-14
Posts: 3
Hmmm, is there any way to make this change to the user's registry via script?
Top
#153408 - 2005-12-14 11:52 PM Re: Setting Registry Permissions
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11629
Loc: CA
You could launch a remote script via task scheduler while the user is logged on or the RemoteExecute UDF while the user is logged on. Then you could use the system's rights or your Admin rights to modify that key.

However, using a GPO to modify that would be the best method.
 

Top
#153409 - 2005-12-14 11:59 PM Re: Setting Registry Permissions
Harrild Offline
Lurker

Registered: 2005-12-14
Posts: 3
Thanks Joel and NTDOC, i suspected that a GPO would be the ideal place for this due to the default security permissions on that particular key.
Top
#153410 - 2005-12-15 12:29 AM Re: Setting Registry Permissions
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11629
Loc: CA
You're quite welcome. The reason those other methods require the user to be logged on is that their registry keys are not open to modify unless they are logged on or you use some trickery with load hive which could be dangerous.
 

Top
Page 1 of 1 1


Moderator:  Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 525 anonymous users online.
Newest Members
batdk82, StuTheCoder, M_Moore, BeeEm, min_seow
17885 Registered Users

Generated in 0.117 seconds in which 0.096 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org