Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1439
  • Last Modified:

Domain users registry permissions.

I have been noticing that some of my domain USERS are installing applications on their computers.  Most of the time, an install will fail because of the domain users limited permissions - cannot write to the registry.

But sometimes the installing application will be successful.

Can anyone explain why some programs can create registry entries and some cannot?

It is up to the applications install routine to honor the users permissions or not?

Thank you,

Bill
0
bmwisme
Asked:
bmwisme
2 Solutions
 
hnminhCommented:
If the user is normal user (only belong to Domain Users group for ex.), he/she will only be able to install software that dont need to change important system registry values (for ex. WinZip) or only keys in HKEY_CURRENT_USER. For other application that need to change other registry like stuff in CurrentControlSet, he/she will need to have local administrator rights!

If you want to allow this, add the User to local "Power Users" group or better is local Administrators. "Power Users" could install most of software they need. Local Administrators will allow the user to make any change they want on the computer so should be consider before doing this if your company have a strict policy of using computer!
0
 
bmwismeAuthor Commented:
The user in question is a normal domain user.  This user just installed a application that created the following registry keys:

HKEY_CLASSES_ROOT\Servocam.Document

HKEY_LOCAL-MACHINE\Software\Classes\Servocam.Document

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ServoCam Designer 2.10c


Does this seem right?

Windows NT4 server/ Windows NT4 client (domain user).
0
 
ender666Commented:
hi
you can try to check the premmisions on the key using regedt32 and see if the user does or does not have premmisions.
it is not up to the app. to use the premmision structre
if the user does not have premmisions there it may be that a diffent user installed it before he logged on.
you can allways try to install the same program without premmisions on a differnt machine as a test.
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now