Win2k Registry help?

[nightowl2003]

Hi,

I was wondering if anyone can help with the following problem i have.

I have windows 2000 server setup as a domain controller and want normal users to modify the registry "HKEY_LOCAL_MACHINE" setting from there workstation. how would i go about doing this. would it be a user right i need to look at or somthing in the group policy??

Thank.

 

[brontosaurus]

I'm not recommending that you allow that kind of control for the whole key, but yes, you can do it via group policy under the Registry section.

 

[nightowl2003]

So as an admin could i log in with my account then modify the hkey_local_machine of the workstation then when users log in with there user account can they read from that registry key i changed.

I am sorta new to win2k server when it comes to group policy/registry editing.


Thanks for your help

 

[brontosaurus]

the answer is yes, using regedt32 in W2K, you could change the permissions on the parent key, which would flow down to all keys underneath, allowing your ordinary users to do whatever you allow...

 

[nightowl2003]

so your saying i actually run regedt32 on my server (win2k server) and edit this??

I want users to read the hkey_local_machine on the workstations when i modify this

So for example i would log into a workstation then edit the hkey_local_machine log out then get users to log in and be able to read this key.

 

[brontosaurus]

as an admin, you can open the registry (using regedt32)of any domain member machine, from any other machine in your domain and change the permission sets. Afterward, when users log onto those machines, they'll be able to manipulate the local registry in whatever manner you deemed appropriate. No need to go to each workstation physically. The alternative to this would be, as I said, to alter the permissions to a particular registry key via policy.