Allowing Standard user on the AD to edit registry

[speddie]

Hi.

We have a Server environment here, runnnig Active Directory. One of our Legacy applications that we use writes to the HKLM section in the registry. Only standard users will use this application, and cannot write to the registry.

What is the easyest way to allow a group to write unrestricted to the registry. Im sure its in GPEdit.msc (Group policy editor) somewhere, but to be honest Im not 100% sure how to do it. Im from back in the days on Poledit.exe

Thanks In Advance

-Eddie

[ale52]

Is it Server 2003 or 2000?  Windows made some pretty significant changes from 00 to 03, especially in the GPO part of AD.

I just went to open up my evaluation version of 2003 server and it told me the time [180 days]had run out...  So I need to reinstall it.

If you open it up it's pretty intuitive.  Actually, you have a boatload more options than Poledit EVER gave you.  It's fun  ...so have fun  

Alan <><  

[ale52]

I'm reinstalling 2003 server now.

1. One of the first things do to (in the meantime) is create an OU (Organizational Unit) and put all the users that you want to be able to edit the registry in there.

2. Step 2 is on the way  

You didn't say, is it 2000 or 2003 server?  :-?

Alan <><  

[Rob Pomeroy]

What is the easyest way to allow a group to write unrestricted to the registry.

You're joking, right?  If you're going to allow any kind of write access, it must be to a very limited portion of the registry.

Fire up registry editor (as a domain & local PC admin); find the subkey you're happy to allow access to; right-click; choose "permissions".

[speddie]

Kool. Ill give those ideas a shot today.

Thanks for that.

Also its 2000 server. (standard not advanced)