Changing security settings on registry keys and folder with script?

03-13-05, 08:34 PM

grol

X-posted to:
microsoft.public.scripting.wsh;
microsoft.public.scripting.vbscript

Hi everyone!

System is Windows XP Pro pcs on a Server 2003 Domain. I need to give normal
users (either groups "everyone" or "users") write access to certain registry
keys (and sub keys) and folders (and subfolders). Basically, critical apps need
admin rights by default, which we are not going to give. :-)

I have to do this on many pcs, so think a script would be easiest. I have
downloaded the TechNet Script Center package, but haven't found a template
suitable for either application.

Could someone please advise on what commands I need, or privide some template
examples. If so, I'd really appreciate it. Any help or tips appreciated too. :-)

Many thanks in advance.
grol

03-14-05, 01:00 PM

Jerold Schulman

On Mon, 14 Mar 2005 09:34:23 +1300, "grol" <grolschie> wrote:

[..]
>downloaded the TechNet Script Center package, but haven't found a template
>suitable for either application.
>
>Could someone please advise on what commands I need, or privide some template
>examples. If so, I'd really appreciate it. Any help or tips appreciated too. :-)
>
>Many thanks in advance.
>grol
>See SETACL from tip 3583 in the 'Tips & Tricks' at [..]

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com

03-15-05, 12:19 PM

Gerry Hickman

Jerold Schulman wrote:

> See SETACL from tip 3583 in the 'Tips & Tricks' at [..]

Nice!

Al Dunbar might be interested in

<http://setacl.sourceforge.net/html/doc-basics.html>

Section 8 (scroll way down).

It covers a similar topic to what we were discussing on here recently.

03-16-05, 06:15 AM

Al Dunbar [MS-MVP]

"Gerry Hickman" <gerry666uk> wrote in message
news:a656
> Jerold Schulman wrote:
>
> > See SETACL from tip 3583 in the 'Tips & Tricks' at [..]
>
> Nice!
>
> Al Dunbar might be interested in
>
> <http://setacl.sourceforge.net/html/doc-basics.html>
>
> Section 8 (scroll way down).
>
> It covers a similar topic to what we were discussing on here recently.

Brilliant! Thanks. Best and most concise explanation I have seen so far. Now
all I need is a slightly more detailed definition of the bits in the access
mask that goes just the teeniest bit farther than this kind of thing:

read - gives read access
write - gives write access
glrp - gives grlp access

/Al

03-18-05, 09:34 AM

grol

"Jerold Schulman" <Jerry> wrote in message
news:rv1c
> On Mon, 14 Mar 2005 09:34:23 +1300, "grol" <grolschie> wrote:
>
> >X-posted to:
> > microsoft.public.scripting.wsh;
> > microsoft.public.scripting.vbscript
> >
> >Hi everyone!
> >
> >System is Windows XP Pro pcs on a Server 2003 Domain. I need to give normal
> >users (either groups "everyone" or "users") write access to certain registry
> >keys (and sub keys) and folders (and subfolders). Basically, critical apps
need
> >admin rights by default, which we are not going to give. :-)
> >
> >I have to do this on many pcs, so think a script would be easiest. I have
> >downloaded the TechNet Script Center package, but haven't found a template
> >suitable for either application.
> >
> >Could someone please advise on what commands I need, or privide some template
> >examples. If so, I'd really appreciate it. Any help or tips appreciated too.
:-)
> >
> >Many thanks in advance.
> >grol
> >
> >
> See SETACL from tip 3583 in the 'Tips & Tricks' at [..]

Thanks man. :-)

Similar Threads
security on registry keys I have got a problem that is driving me crazy. On my HP laptop with XP Pro, as administrator I install PDFCreator and VMWare server console. I then logout and reconnect as a...
Registry keys with weird permission settings I have a whole hierarchy of registry keys I need to delete. When I click on the top-level key I get: Access is Denied. Right click then gives the interesting message: You...
Registry Keys to set Explorer settings I'm trying to setup a registry file that i can put a whole lot of tweaks in and run it to set a whole lot settings automatically and also apply those settings to any future...
Script to delete registry key having sub keys. Hi Gurus, Is there some methord that allows me to delete the registry keys which has sub keys, using vbscript/WMI. Currently I am using the DeleteKey methord, but it will...
Adding / changing registry keys via GPO's How do you add a registry key via a GPO??? I assume that changing a key is the similiar to adding one. TIA