Computer Hope

Microsoft => Microsoft Windows => Windows Server => Topic started by: speddie on September 14, 2006, 12:12:59 AM

Title: Allowing Standard user on the AD to edit registry
Post by: speddie on September 14, 2006, 12:12:59 AM

Hi.

We have a Server environment here, runnnig Active Directory. One of our Legacy applications that we use writes to the HKLM section in the registry. Only standard users will use this application, and cannot write to the registry.

What is the easyest way to allow a group to write unrestricted to the registry. Im sure its in GPEdit.msc (Group policy editor) somewhere, but to be honest Im not 100% sure how to do it. Im from back in the days on Poledit.exe

Thanks In Advance

-Eddie

Title: Re: Allowing Standard user on the AD to edit regis
Post by: ale52 on September 14, 2006, 10:48:02 AM

Is it Server 2003 or 2000?  Windows made some pretty significant changes from 00 to 03, especially in the GPO part of AD.

I just went to open up my evaluation version of 2003 server and it told me the time [180 days]had run out... :-[  So I need to reinstall it.

If you open it up it's pretty intuitive.  Actually, you have a boatload more options than Poledit EVER gave you.  It's fun  ;D...so have fun  ;D

Alan <><  :D

Title: Re: Allowing Standard user on the AD to edit regis
Post by: ale52 on September 14, 2006, 12:22:20 PM

I'm reinstalling 2003 server now.

1. One of the first things do to (in the meantime) is create an OU (Organizational Unit) and put all the users that you want to be able to edit the registry in there.

2. Step 2 is on the way  ;D

You didn't say, is it 2000 or 2003 server?  :-?

Alan <><  :D

Title: Re: Allowing Standard user on the AD to edit regis
Post by: Rob Pomeroy on September 14, 2006, 03:32:10 PM

Quote

What is the easyest way to allow a group to write unrestricted to the registry.

You're joking, right?  If you're going to allow any kind of write access, it must be to a very limited portion of the registry.

Fire up registry editor (as a domain & local PC admin); find the subkey you're happy to allow access to; right-click; choose "permissions".

Title: Re: Allowing Standard user on the AD to edit regis
Post by: speddie on September 14, 2006, 06:46:51 PM

Kool. Ill give those ideas a shot today.

Thanks for that.

Also its 2000 server. (standard not advanced)