+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast
Results 16 to 30 of 36
Windows Server 2000/2003 Thread, I'm stuck !! Group Policy Registry Keys in Technical; its a localmachine Reg setting so i assume it can only be done as a STARTUP script not a user ...
  1. #16

    Join Date
    Dec 2009
    Posts
    607
    Thank Post
    8
    Thanked 36 Times in 34 Posts
    Rep Power
    17
    its a localmachine Reg setting so i assume it can only be done as a STARTUP script not a user script..

    IRC .. users dont have access to write to the LOCALMACHINE part of the registry only the CURRENT USER ... Which probally explains why your Desktop Wallpaper one works.

    Cant explain why the admins cant run it though.

  2. #17

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,068 Times in 625 Posts
    Rep Power
    740
    Christ on a bike......
    Just to get this bit of software working I have had to do the following:

    Create a startup script with the registry entries in with the line regedit /s reg.reg line in the CMD. Thinking that was good enough - OH no, the software required the user to have modify rights to the reg entries - read not good enough, so had to add that via a policy entry.......
    All that just to get a flash based bit of software working - another bit of software to add to my crap list......

  3. #18

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,941
    Thank Post
    1,199
    Thanked 1,068 Times in 759 Posts
    Rep Power
    330
    @mattx:

    Flash!!..................dun! dun! dun!......................Ahhaaaaa!!
    Flash!!..................dun! dun! dun!......................Ahhaaaaa!

    Saviour of the Universe.......................dun! dun! dun!

  4. 2 Thanks to bossman:

    mattx (11th February 2010), sted (11th February 2010)

  5. #19
    HullFC's Avatar
    Join Date
    Sep 2009
    Posts
    23
    Thank Post
    3
    Thanked 8 Times in 7 Posts
    Rep Power
    12

    Thumbs up

    Hi All,

    I would seriously advise using group policy prefs. You can use it with server 2003 as long as you manage it from a vista/7 station. It would solve a problem like this in a jiffy.

    Shaun

  6. #20

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,068 Times in 625 Posts
    Rep Power
    740
    Oooo hang on, nope - PCs won't take the policy changes I have made on the registry entries......god darn it....anyone know the syntax of the top of their head either using regedit32 or Xcalcs to change a key's permissions......?

  7. #21

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,781
    Thank Post
    3,285
    Thanked 1,054 Times in 975 Posts
    Rep Power
    365
    Quote Originally Posted by mattx View Post

    line in - it's not even adding the frigging key for christ's sake......All my other ones are working......looking for something to throw out the window.....
    if you have any macs nearby that your tempted to throw out a window maybe you could save a mac and send me it via snail mail

    edited

    Is this in vbscript or what scripting language?

    Registry permissions can be manipulated through the command line using the SubInACL.exe tool. For example, the permissions on the HKEY_LOCAL_MACHINE\SOFTWARE key can be displayed using:

    subinacl /keyreg HKEY_LOCAL_MACHINE\SOFTWARE /display
    http://en.m.wikipedia.org/wiki/Windo...edirected=true

    as per wikipedia you can script perms through the subinacls exe or equivelant util
    Last edited by mac_shinobi; 11th February 2010 at 06:41 PM.

  8. #22

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,068 Times in 625 Posts
    Rep Power
    740
    Quote Originally Posted by mac_shinobi View Post
    if you have any macs nearby that your tempted to throw out a window maybe you could save a mac and send me it via snail mail

    edited

    Is this in vbscript or what scripting language?



    Windows Registry

    as per wikipedia you can script perms through the subinacls exe or equivelant util
    One of our teacher's has a Mac, sorry HAD a Mac, he got so fed up with it he's dumped it and gone back to Windows.......will use Regini to change the permissions - but with the bleeding phone constantly going and people coming in and out of the office asking for stuff I never got round to finishing it - still there is always half term.....

  9. #23
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    429
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    how about reg2adm from the N.U.T.S package Yizhar Hurwitz page

    it works a treat for me.

    BoX

  10. Thanks to box_l from:

    mattx (11th February 2010)

  11. #24

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,068 Times in 625 Posts
    Rep Power
    740
    Quote Originally Posted by box_l View Post
    how about reg2adm from the N.U.T.S package Yizhar Hurwitz page

    it works a treat for me.

    BoX
    Thanks - will take a look at that.

  12. #25

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,781
    Thank Post
    3,285
    Thanked 1,054 Times in 975 Posts
    Rep Power
    365
    Quote Originally Posted by mattx View Post
    One of our teacher's has a Mac, sorry HAD a Mac, he got so fed up with it he's dumped it and gone back to Windows.......will use Regini to change the permissions - but with the bleeding phone constantly going and people coming in and out of the office asking for stuff I never got round to finishing it - still there is always half term.....
    dumped it where ?

  13. #26

    mattx's Avatar
    Join Date
    Jan 2007
    Posts
    9,240
    Thank Post
    1,058
    Thanked 1,068 Times in 625 Posts
    Rep Power
    740
    Quote Originally Posted by mac_shinobi View Post
    dumped it where ?
    On my desk. [ Mac Book - one of those stupid thin ones ]

  14. #27
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    429
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    Changing Reg permissions

    Code:
    subinacl.exe /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib /GRANT=domain\user=F
    or
    Code:
    subinacl.exe /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib /GRANT=domain\group=F
    The "F" grants full.

    You'll find examples in sims.bat (if you have SIMS)

    BoX

  15. 2 Thanks to box_l:

    link470 (15th February 2010), mattx (12th February 2010)

  16. #28
    link470's Avatar
    Join Date
    Nov 2007
    Location
    Canada
    Posts
    250
    Thank Post
    85
    Thanked 8 Times in 6 Posts
    Rep Power
    15
    I'm trying your suggestion BoX, using that tool, and I'm getting error 1337 [lol] The security ID structure is invalid. The software I'm trying to edit is by a company called Kuta software and I'm trying to modify a key to make it writable of course.

    Here's the batch file:

    regedit /s %logonserver%\netlogon\KUTA.reg
    %logonserver%\netlogon\subinacl.exe /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth /GRANT=MY_DOMAIN\Users=F

    This outputs the following:

    >regedit /s %logonserver%\netlogon\KUTA.reg

    >%logonserver%\netlogon\subinacl.exe /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth /GRANT=MY_DOMAIN\Users=F
    LookupAccountName : HKEY_LOCAL_MACHINE\SOFTWARE\Kuta:MY_DOMAIN\users 1337 The security ID structure is invalid.

    Current object HKEY_LOCAL_MACHINE\SOFTWARE\Kuta will not be processed

    Elapsed Time: 00 00:00:00
    Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=MY_DOMAIN\users=f : Error when checking arguments - HKEY_LOCAL_MACHINE\SOFTWARE\Kuta


    ::EDIT::

    I tried adding quotes around HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth making the command:

    %logonserver%\netlogon\subinacl.exe /KEYREG "HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth" /GRANT=MY_DOMAIN\Users=F

    Still no luck.
    Last edited by link470; 15th February 2010 at 07:43 PM.

  17. #29
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    429
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    I get the same results "1337" with local groups "users" and "administrators", however when i created a test group "test" it worked!?

    try...

    Code:
    SubInAcl.exe /KEYREG "HKEY_LOCAL_MACHINE\SOFTWARE\Kuta Software\Auth" /GRANT=Users=F
    I think it has trouble with the builtin groups. It has the same issue locally.

    I realise that you want this for your domain\users but domain users are local users as far as this goes.

    BoX

  18. Thanks to box_l from:

    link470 (15th February 2010)

  19. #30
    link470's Avatar
    Join Date
    Nov 2007
    Location
    Canada
    Posts
    250
    Thank Post
    85
    Thanked 8 Times in 6 Posts
    Rep Power
    15
    Quote Originally Posted by box_l View Post
    I think it has trouble with the builtin groups. It has the same issue locally.
    Fantastic, thanks! That worked Only thing now, and it's not huge, I can edit the few entries below it, but is there a way I can use this exe to place the Users=F permissions down to propagate to internal entries? If not, I THINK I can work without it. Just thought I'd ask while I can.

SHARE:
+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast

Similar Threads

  1. Disabling sticky keys via group policy
    By timbo343 in forum Windows
    Replies: 28
    Last Post: 25th January 2013, 11:41 AM
  2. VB Delete registry keys with sub keys
    By cookie_monster in forum Scripts
    Replies: 1
    Last Post: 6th November 2009, 08:57 AM
  3. Replies: 9
    Last Post: 10th February 2009, 02:46 AM
  4. Group policy
    By ricki in forum Wireless Networks
    Replies: 5
    Last Post: 29th February 2008, 01:40 PM
  5. Group Policy OU's
    By iownitcouk in forum Windows
    Replies: 3
    Last Post: 23rd February 2008, 02:24 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •