Solved

Group Policy blocking users writing to registry

Posted on 2006-07-18
4
135 Views
Last Modified: 2010-04-18
I am installing a new Samsung Telephone system this weekend.

Along with the phone system is a software package called Office Serv call. In order for Office Serv call to work Samsung tells me in needs to write to the registry when it is opened and it use.

My problem is I have only worked with my company for two months, I never implemented any of the policies which lock down the users so I am struggling to work out where to start.

We are currently on Windows 2003, Active Directory structure, single site, one domain, 100 users of which about 20 will have this software, all clients are using XP.

Any help will be greatly appreciated.
0
Comment
Question by:jstirrup69
  • 2
4 Comments
 
LVL 70

Assisted Solution

by:Chris Dent
Chris Dent earned 125 total points
ID: 17128640

I'm not sure of which policies that will be blocking write access to the registry - although I know it's possible to add keys and such using the Registry setting under Computer Configuration \ Windows Settings \ Security Settings.

However, there are a few things that can help you figure out what's effecting what:

1. Resultant Set of Policy Tool

This runs from any XP or 2003 system by hitting Start, then Run and typing rsop.msc.

2. Group Policy Management Console

Far better than the default tools for managing policies this one also requires XP or 2003 but will give a much nicer view of where policies are applied and exactly what settings are being used. You can download it here:

http://www.microsoft.com/downloads/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&DisplayLang=en

Sorry it's not more help.

Chris
0
 
LVL 43

Accepted Solution

by:
Steve Knight earned 125 total points
ID: 17128878
Adding to what has been said.  You need to identify from the supplier of the software or your own testing where in the registry it needs to write to.  If the users do not have access to that area then it is easy to add a new group policy object assigned at the top of the OU holding your computers (or at the domain level if you wish) giving a suitable group such as Everyone or Authenticated Users read/write access to the relevant key - the place to find it is as specified by Chris above.    You can't add data to teh registry that way but you it is there to give rights to users so they can access it.


0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 17518719
Sounds good to me.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
This video discusses moving either the default database or any database to a new volume.
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now