Regisrty Update

[DomCon]

Hi Everyone,

I am trying to update a Security Key for out under the
following registry keys:

HKEY_USERS\S-1-5-21-73586283-1580818891-1957994488-1636
\Software\Policies\Microsoft\Security

I am deploying this key through SMS and you need
administrator rights on the local machine to edit the
registry. The users do not have admin rights.

I have selected the radio button "Run with Administrative
rights". It still does not work.

I have also used the radio button "Use Windows NT client
software installation accout"

An article under help in SMS Administrator says to:

"1. Create a program that runs in a secure context with
administrative rights.

2. Create a second program that:
-Runs in the user's context.
-Specifies the first program in Run another program
first

3. Advertise the second program to a collection of Windows
NT clients."

How do you create a secure context with admin rights?

Where does the admin account come from??

Any other suggestions would be great??

Cheers!!

Domenic
.

 

[NetworkAdmin]

wait a second, are you sending this package to more than one machine or just the machine that has S-1-5-21-73586283-1580818891-1957994488-1636.

you do know that this key exists only on that one machine. those sequence of numbers is a SID, this is unique.

there is not enough information to determine what you are trying to do and how you are doing it.

if you need to edit the registry you can follow what i do.
export the registry key that needs to be changed on the target machines. create a bat file with the following syntax: regedit.exe /s filename.reg

use this bat file as your program in your package.

 

[DomCon]

Sorry, well I found that key on two different 2000 machines, but I will take your word that its on all machines.

What is actually trying to be done is update CURRENT_USER\Software\Policies\Microsoft\Security

There seems to be a security issue while deploying it over SMS, it doesn't apply to the user, they don't have the rights on the local PC to edit the registry.

Any suggestions??

In my orginal post there was something I found in the help section about creating a secure context with admin rights, then running the program with user rights.
Any Ideas on how to perform this task??

Cheers!!

Dom