Writevalue access denied - KiXtart.org - official site

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » Writevalue access denied

Page 1 of 1

1

Topic Options

#305 - 1999-08-19 02:29 AM Writevalue access denied
Anonymous Anonymous Unregistered	Hi, I have next problem: When logging on my users start a kixtart-script in which a registry value is supposed to be set/added. But they have only read-access to registry-key so error 5: Access denied occurs. Anyone? ------------------
Top

#306 - 1999-08-19 10:52 AM Re: Writevalue access denied
Shawn Shawn Administrator Registered: 1999-08-13 Posts: 8611	On Windows NT you can run regedt32 and set the permissions on the offending key. I know that sounds simplistic put that's what registry permissions are for. If you do want to take this approach, then I would recommend creating a Windows NT group and assigning the registry permissions under the group name, then include the users into that group. I think ( correct me if I'm wrong ) that the users logon script runs in the context of the user, not under the system context. If there were a way to switch context from user to system and bypass registry permissions, that would seem like a huge security gap to me. Of course, it all depends on the specific registry key your changing. If it's a Windows setting under HKLM, then your options are limited. If the key is in HKCU and it's an application that you wrote, than change the application to create these keys with different permissions. Sorry but thats all I can suggest. What key are you trying to change anyway ? I'll try some things over here and get back to you. Shawn.
Top

#307 - 1999-08-23 01:46 AM Re: Writevalue access denied
Anonymous Anonymous Unregistered	Shawn, thx for answer, but using regedt32 to set permissions for everyone is exactly what i didn't want to do :-( Key i am trying to set is HKCU\SoftWare\Microsoft\Windows\CurrentVersion\Policies\Explorer Value NoDrives. Security on HKCU\...\Explorer is SYSTEM and Admins Full Control, the owner has read access. thx in adv, Luuk
Top

#308 - 1999-08-23 05:07 AM Re: Writevalue access denied
Anonymous Anonymous Unregistered	what you can do is to start the Schedule Service from within your script, and than with "soon.exe" from the Resourcekit you tell the schedule servie to start a second script within 10 second frokm now ! In this second script you can change the registry key's cause the schedule service runs as System ! ------------------ Lon Geefshuysen (MCP) kixtart.to/lon lon@kixtart.to
Top

#309 - 1999-08-30 09:00 AM Re: Writevalue access denied
Shawn Shawn Administrator Registered: 1999-08-13 Posts: 8611	I like Lons' answer. I'm gonna keep that one in my neat tricks folder. I've been trying to find a way to write HKLM from logon scripts for a while now. We are also hiding drives on the workstation. The easiest way of enforcing NoDrives in a homogenous NT environment is by using standard Windows NT policy. Microsoft already has a policy editor template for hiding all drives (common.adm). We then customized it to hide/expose any drive we want.
Top

Page 1 of 1

1

Previous Topic

Previous Topic View All Topics

View All Topics

Index Next Topic

Next Topic

Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart

Hop to:

Shout Box

Who's Online

0 registered and 1343 anonymous users online.

Newest Members

Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.099 seconds in which 0.073 seconds were spent on a total of 12 queries. Zlib compression enabled.

click tracking