I'm trying to set a permission on a registry key for a program that requires to write where the database is held
I've been told that REGINI.exe does this, but seems to complex, can some one help me write a simple logon script that will set the USERS group to full permission on a registry key upon computer bootup, i will use this script in a GPO Computer Start up Script
I've tried Registry GPO under "Computer\Windows Setting\Security Settings\Registry" and doesn't work,
the key is held under
Hope some one can help!
I'd be more concerned about why it's not working via Group Policy, as that is easily the most reliable method I know of. Does the key already exist or does it need to be created at the same time?
I agree with AngryTechnician, GPO is the best way to do it. Can you confirm you have the syntax and location of the Registry Key absolutely correct in the GPO? is the GPO showing in GPResult? if so, is there an error log stating why it hasnt applied?
the key has already been created by the program. but im trying to set permission on a key that already exists!
I havent run a GPResult yet but will try now
In theory you shouldn't need to modify permissions because writes to that registry key should be automatically redirected from...
Right im still having the problem, ill explain in more detail
One of our Science teachers has ordered "Rising Stars Assessment, Science unit tests" CD's.
Rising Stars Assessment : Rising Stars - Educational Publishing Specialists
for all the teachers to access this program naturally i want it to be shared on our network, also so that they are using the same database, the installation does state that it does support sharing over a network
Inside the booklet it does say "The program will store the location of the database on the network by writing to the registry, holding this information for all users"
so I've shared the folder on the network containing the assessment and placed the database files and folder within the same share. teacher group has been given full read /write to the folder, and same with the share permission
ive tried it on my login, i have administrative rights of course with me being the IT Tech, and works fine, i can see the registry key (as stated above) and it has written the location of the database file fine.
i come to login in as a teacher and it wont work as they teacher group needs to be able to write the key into registry! now its all right i know i can login as administrator and let it write the key. but having to do this on every computer is a joke!!!
so ive phoned Rising stars and they said i need to give permission to teachers so they can write to registry! yip no problem i know how to do this.
now this is where im stuck
ive written a GPO just purely for teachers group permission to write to registry,
im running Server 2008 R2 btw! and Windows 7 pro 64 Bit Clients
so in GPO ive gone to
Computer configuration\Policies\Windows Settings\Security Settings\Registry
Created a new key
the key that the teachers need to write to (so Rising Star support say)
given the permissions to the teacher group.
put the gpo into the correct container so it comes into effect for all computers within school
gone to try it in various classes and still no go. i can see it hasn't given out permissions!
ive run GPRESULT /H /report.html
i can see its there and running? am i missing something here.
what would be the common cause for this not to happen. ive never had to do this before with registry permissions
Has any one ever had this problem before??
Judging by the fact that is shown in the gpresult, the GPO is correctly linked however it must be configured slightly wrong. Please check the event viewer for any event logs. My guess would be your wording/syntax in the GPO is slightly incorrect causing the registry permission to not be applied. My first guess would be the syntax of the actual registry key itself. keep tweaking it until the permission gets applied. You could try installing the software on your workstation, then using the RSAT to create the group policy on your station aswell thereby making it easier to compare things and point to the correct location in the registry. I have used this kind of setup to apply permissions to upgrade sims and it works perfectly so you will definately get there is you persevere!
Did you ever get this to work? I'm trying to do the same thing and install rising stars science on our RM CC4 server and I'm getting the same error.
unfortunately not! i gave up on it.
i did contact the company who make this software and claimed that registry permission was the problem. but I'm not entirely sure it is. i think its a very poorly written software.
so to answer your question. no! sorry
OK no worries. Thanks for the reply Philip!
@GFSparrow, we had a similar problem some time ago with a macromedia product. You could have a look at DWN1075502 on the RM website and see if you can adapt this for your needs.