Solved

Group Policy blocking users writing to registry

Posted on 2006-07-18
4
136 Views
Last Modified: 2010-04-18
I am installing a new Samsung Telephone system this weekend.

Along with the phone system is a software package called Office Serv call. In order for Office Serv call to work Samsung tells me in needs to write to the registry when it is opened and it use.

My problem is I have only worked with my company for two months, I never implemented any of the policies which lock down the users so I am struggling to work out where to start.

We are currently on Windows 2003, Active Directory structure, single site, one domain, 100 users of which about 20 will have this software, all clients are using XP.

Any help will be greatly appreciated.
0
Comment
Question by:jstirrup69
  • 2
4 Comments
 
LVL 70

Assisted Solution

by:Chris Dent
Chris Dent earned 125 total points
ID: 17128640

I'm not sure of which policies that will be blocking write access to the registry - although I know it's possible to add keys and such using the Registry setting under Computer Configuration \ Windows Settings \ Security Settings.

However, there are a few things that can help you figure out what's effecting what:

1. Resultant Set of Policy Tool

This runs from any XP or 2003 system by hitting Start, then Run and typing rsop.msc.

2. Group Policy Management Console

Far better than the default tools for managing policies this one also requires XP or 2003 but will give a much nicer view of where policies are applied and exactly what settings are being used. You can download it here:

http://www.microsoft.com/downloads/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&DisplayLang=en

Sorry it's not more help.

Chris
0
 
LVL 43

Accepted Solution

by:
Steve Knight earned 125 total points
ID: 17128878
Adding to what has been said.  You need to identify from the supplier of the software or your own testing where in the registry it needs to write to.  If the users do not have access to that area then it is easy to add a new group policy object assigned at the top of the OU holding your computers (or at the domain level if you wish) giving a suitable group such as Everyone or Authenticated Users read/write access to the relevant key - the place to find it is as specified by Chris above.    You can't add data to teh registry that way but you it is there to give rights to users so they can access it.


0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 17518719
Sounds good to me.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now