Doug,
There is an Admin Tool called Group Policy called Group Policy Management (depending on your version of Windows you may need to install it – it is part of the XP adminpak if you are worried about putting it on the server). In there you can go the Group Policy Modelling tab. Run the Wizard on that and you will be able to see what policies are being applied and from where.
That assumes that this is a Domain-based group policy. It may simply be done on the specific machine, in which case Run gpedit and you will get the interface to hunt through.
Nick
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Doug Rooney
Sent: 22 April 2009 18:18
To: thin@freelists.org
Subject: [THIN] Re: Changing Registry permissions
Neil,
Unfortunately I didn’t, I inherited this, I came from a Unix world and I am still learning the windows stuff, we had a consultant set everything up, then he dropped off the face of the earth. I have learned a lot about AD and policies, but I am quite the novice compared to you all, which is why I ask for help. I prefer to look dumb and ask obvious questions, that just ‘try it’ and screw something up. One thing out friendly consultant did was create a group called “Many Rights” and then made everyone a member of it, well, “Many Rights” was just another name for Administrator, so everyone could do anything, what a flipping mess that was, he did it because there was a permissions issue and instead of figuring it out and fixing it, he just made “Many Rights”, I finally figured out the issue and fixed it, and removed “Many Rights”. So I know I have to change permissions on some Registry Keys, but have only a slight idea how, and I know I have to have permission as Administrator, but have no idea how to fix that. So any and all help is greatly appreciated.
Thank You
~Doug Rooney
Sonoma Tilemakers
IT Manager
7750 Bell Rd.
Windsor Ca, 95492
(707) 837-8177 X11
(707) 837-9472 FAX
it@sonomatilemakers.com
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Braebaum, Neil
Sent: Wednesday, April 22, 2009 9:08 AM
To: thin@freelists.org
Subject: [THIN] Re: Changing Registry permissions
Um, how did you disable it? ;-)
To get that message, there's a policy being applied. Wouldn't you, as the administrator, have created that policy (especially as it appears to affect the administrator, too)?
Neil
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Doug Rooney
Sent: 22 April 2009 16:56
To: thin@freelists.org
Subject: [THIN] Re: Changing Registry permissions
Yeah, I got that, but how do I enable it?
Thank You
~Doug Rooney
Sonoma Tilemakers
IT Manager
7750 Bell Rd.
Windsor Ca, 95492
(707) 837-8177 X11
(707) 837-9472 FAX
it@sonomatilemakers.com
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Braebaum, Neil
Sent: Wednesday, April 22, 2009 8:13 AM
To: thin@freelists.org
Subject: [THIN] Re: Changing Registry permissions
That message is policy based (registry editing has been disabled).
Neil
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Doug Rooney
Sent: 22 April 2009 16:07
To: thin@freelists.org
Subject: [THIN] Re: Changing Registry permissions
I tried REGINI.EXE and I get… “Error: Registry editing has been disabled by your administrator.”
I am the administrator, how do I enable editing? Windows 2003 server.
Thank You
~Doug Rooney
Sonoma Tilemakers
IT Manager
7750 Bell Rd.
Windsor Ca, 95492
(707) 837-8177 X11
(707) 837-9472 FAX
it@sonomatilemakers.com
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Raffensberger, Stephen D
Sent: Wednesday, April 22, 2009 7:15 AM
To: thin@freelists.org
Subject: [THIN] Re: Changing Registry permissions
Two choices immediately come to mind…
http://support.microsoft.com/kb/237607 which describes regini.
http://www.microsoft.com/downloads/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en which describes subinacl.
Steve Raffensberger
CSG Citrix Administrator
Sovereign Bank
1125 Berkshire Boulevard
Wyomissing, PA 19610
email: sraffens@sovereignbank.com
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Minero, Hector B CIV NSWCDD, K55
Sent: Wednesday, April 22, 2009 9:58 AM
To: thin@freelists.org
Subject: [THIN] Changing Registry permissions
Hi all, how can change registry permission on a registry key in an automated way?
When executing a *.reg file, does it also modify permissions?
_______________________________
Hector Minero
This message contains information which may be confidential and privileged. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received the message in error, please advise the sender by reply e-mail, and delete or destroy the message. Thank you.
********************************************************************************
This email and its attachments are confidential to the intended recipient. If this has come to you in error, please notify the sender immediately and delete this email from your system. You must take no action based on this email, nor must you copy or disclose it or any part of its contents to any person or organisation. Please note that email communications may be monitored. The registered office of Shop Direct Limited is First Floor, Skyways House, Speke Road, Speke, Liverpool, L70 1AB, registered number 04730752.
Subsidiary companies of Shop Direct Limited include:
Shop Direct Group Financial Services Limited (SDGFS), Shop Direct Financial Services Limited (SDFS) and Shop Direct Finance Company Limited (SDFC). The registered office of SDGFS, SDFS and SDFC is Aintree Innovation Centre, Park Lane, Netherton, Bootle, L30 1SL, registered numbers 05200103 (SDGFS), 04730706 (SDFS) and 04660974 (SDFC). SDFS and SDFC are authorised and regulated by the Financial Services Authority in respect of arranging insurance products.
Shop Direct Contact Centres Limited (SDCC) and Shop Direct Home Shopping Limited (SDHS). The registered office of SDCC and SDHS is First Floor, Skyways House, Speke Road, Speke, Liverpool, L70 1AB, registered numbers 05330323 (SDCC), 04663281 (SDHS).
All companies registered in England.
********************************************************************************
