Registry Permissions

[Guest]

Hi

 

I'm trying to set a permission on a registry key for a program that requires to write where the database is held

 

I've been told that REGINI.exe does this, but seems to complex, can some one help me write a simple logon script that will set the USERS group to full permission on a registry key upon computer bootup, i will use this script in a GPO Computer Start up Script

 

I've tried Registry GPO under "Computer\Windows Setting\Security Settings\Registry" and doesn't work,

 

the key is held under

 

"HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\RisingStars\Assessments"

 

Hope some one can help!

Edited May 10, 2012 by phillip_croxford

[AngryTechnician]

I'd be more concerned about why it's not working via Group Policy, as that is easily the most reliable method I know of. Does the key already exist or does it need to be created at the same time?

[Zenden]

I agree with AngryTechnician, GPO is the best way to do it. Can you confirm you have the syntax and location of the Registry Key absolutely correct in the GPO? is the GPO showing in GPResult? if so, is there an error log stating why it hasnt applied?

[Guest]

the key has already been created by the program. but im trying to set permission on a key that already exists!

 

I havent run a GPResult yet but will try now

[Arthur]

In theory you shouldn't need to modify permissions because writes to that registry key should be automatically redirected from...

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\RisingStars\Assessments

 

to

 

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\RisingStars\Assessments

[Guest]

Hi

 

Right im still having the problem, ill explain in more detail

 

One of our Science teachers has ordered "Rising Stars Assessment, Science unit tests" CD's.

 

Rising Stars Assessment : Rising Stars - Educational Publishing Specialists

 

 

for all the teachers to access this program naturally i want it to be shared on our network, also so that they are using the same database, the installation does state that it does support sharing over a network

 

Inside the booklet it does say "The program will store the location of the database on the network by writing to the registry, holding this information for all users"

so I've shared the folder on the network containing the assessment and placed the database files and folder within the same share. teacher group has been given full read /write to the folder, and same with the share permission

 

ive tried it on my login, i have administrative rights of course with me being the IT Tech, and works fine, i can see the registry key (as stated above) and it has written the location of the database file fine.

 

i come to login in as a teacher and it wont work as they teacher group needs to be able to write the key into registry! now its all right i know i can login as administrator and let it write the key. but having to do this on every computer is a joke!!!

 

so ive phoned Rising stars and they said i need to give permission to teachers so they can write to registry! yip no problem i know how to do this.

 

now this is where im stuck

 

ive written a GPO just purely for teachers group permission to write to registry,

 

im running Server 2008 R2 btw! and Windows 7 pro 64 Bit Clients

 

so in GPO ive gone to

 

Computer configuration\Policies\Windows Settings\Security Settings\Registry

 

Created a new key

 

the key that the teachers need to write to (so Rising Star support say)

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\RisingStars|Assessment

 

given the permissions to the teacher group.

 

put the gpo into the correct container so it comes into effect for all computers within school

 

gone to try it in various classes and still no go. i can see it hasn't given out permissions!

 

ive run GPRESULT /H /report.html

 

i can see its there and running? am i missing something here.

 

what would be the common cause for this not to happen. ive never had to do this before with registry permissions

 

Has any one ever had this problem before??

 

 

 

any ideas???

[Zenden]

Judging by the fact that is shown in the gpresult, the GPO is correctly linked however it must be configured slightly wrong. Please check the event viewer for any event logs. My guess would be your wording/syntax in the GPO is slightly incorrect causing the registry permission to not be applied. My first guess would be the syntax of the actual registry key itself. keep tweaking it until the permission gets applied. You could try installing the software on your workstation, then using the RSAT to create the group policy on your station aswell thereby making it easier to compare things and point to the correct location in the registry. I have used this kind of setup to apply permissions to upgrade sims and it works perfectly so you will definately get there is you persevere!

[GFSparrow]

Did you ever get this to work? I'm trying to do the same thing and install rising stars science on our RM CC4 server and I'm getting the same error.

[Guest]

unfortunately not! i gave up on it.

 

i did contact the company who make this software and claimed that registry permission was the problem. but I'm not entirely sure it is. i think its a very poorly written software.

 

so to answer your question. no! sorry

[GFSparrow]

OK no worries. Thanks for the reply Philip!

[HarryMonkey]

@GFSparrow, we had a similar problem some time ago with a macromedia product. You could have a look at DWN1075502 on the RM website and see if you can adapt this for your needs.