Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Group Policy blocking users writing to registry

Posted on 2006-07-18
4
Medium Priority
?
149 Views
Last Modified: 2010-04-18
I am installing a new Samsung Telephone system this weekend.

Along with the phone system is a software package called Office Serv call. In order for Office Serv call to work Samsung tells me in needs to write to the registry when it is opened and it use.

My problem is I have only worked with my company for two months, I never implemented any of the policies which lock down the users so I am struggling to work out where to start.

We are currently on Windows 2003, Active Directory structure, single site, one domain, 100 users of which about 20 will have this software, all clients are using XP.

Any help will be greatly appreciated.
0
Comment
Question by:jstirrup69
  • 2
4 Comments
 
LVL 71

Assisted Solution

by:Chris Dent
Chris Dent earned 375 total points
ID: 17128640

I'm not sure of which policies that will be blocking write access to the registry - although I know it's possible to add keys and such using the Registry setting under Computer Configuration \ Windows Settings \ Security Settings.

However, there are a few things that can help you figure out what's effecting what:

1. Resultant Set of Policy Tool

This runs from any XP or 2003 system by hitting Start, then Run and typing rsop.msc.

2. Group Policy Management Console

Far better than the default tools for managing policies this one also requires XP or 2003 but will give a much nicer view of where policies are applied and exactly what settings are being used. You can download it here:

http://www.microsoft.com/downloads/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&DisplayLang=en

Sorry it's not more help.

Chris
0
 
LVL 43

Accepted Solution

by:
Steve Knight earned 375 total points
ID: 17128878
Adding to what has been said.  You need to identify from the supplier of the software or your own testing where in the registry it needs to write to.  If the users do not have access to that area then it is easy to add a new group policy object assigned at the top of the OU holding your computers (or at the domain level if you wish) giving a suitable group such as Everyone or Authenticated Users read/write access to the relevant key - the place to find it is as specified by Chris above.    You can't add data to teh registry that way but you it is there to give rights to users so they can access it.


0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 17518719
Sounds good to me.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question