Help with Registry and Batch
Hi all,
I am editing a batch file I use to setup new computers on my network. I have 2 batch files I run. The first is used to launch the setup programs. The second batch file will be used to add permissions to the newly installed programs. I've setup the file to use the CALCS program, which is working fine.
My next step here is to change permissions on registry keys, for the newly installed programs.
I am trying to add the local group 'USERS' to regkeys with full control, on those specific keys only. I've checked reg.exe, but cannot find what I am looking for.
Can the CALCS program be used to also change registry key perms?
Thanks,
I am editing a batch file I use to setup new computers on my network. I have 2 batch files I run. The first is used to launch the setup programs. The second batch file will be used to add permissions to the newly installed programs. I've setup the file to use the CALCS program, which is working fine.
My next step here is to change permissions on registry keys, for the newly installed programs.
I am trying to add the local group 'USERS' to regkeys with full control, on those specific keys only. I've checked reg.exe, but cannot find what I am looking for.
Can the CALCS program be used to also change registry key perms?
Thanks,
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
None that I know of...if you're adding to HKCU though the user should have access to that hive...
ASKER
I am adding a key to 'HKEY_LOCAL_MACHINE\SOFTWA
I am logging on to the machine w/ the PC administrator ID, setuping up the PC for new users. Once we have them logged on, they run into an issue where they are unable to specify the servers to connect to, for REUTERS.
I am logging on to the machine w/ the PC administrator ID, setuping up the PC for new users. Once we have them logged on, they run into an issue where they are unable to specify the servers to connect to, for REUTERS.
http://www.windowsitpro.com/Article/ArticleID/20503/20503.html mentions the usage of the adssecurity.dll library - though I've not used that method - but again, it's not a native solution.
Can you point to a public share to access the subinacl usage?
Can you point to a public share to access the subinacl usage?
ASKER
Is it possible to export only a certain part of the registry, and then import that part into the new PC?
So I can change the perms for the group on 1 computer, then import it to any PC I need to?
So I can change the perms for the group on 1 computer, then import it to any PC I need to?
"maybe"...reason being is that the acl will be pointing to 'your' local security.
Those users may not be on the other system(s), so you'll likely get a lot of 'invalid' entries, like S-0133...bunch of numbers... indicating that the account wasn't found.
However, the SID for Users should be the same across all systems - so while it may be ugly with the invalid accounts, this just might work for you... :)
Those users may not be on the other system(s), so you'll likely get a lot of 'invalid' entries, like S-0133...bunch of numbers... indicating that the account wasn't found.
However, the SID for Users should be the same across all systems - so while it may be ugly with the invalid accounts, this just might work for you... :)
ASKER
Sir,
I think I've made some progress. I took your advice by adding the SUBINACL file to a shared drive. I can just copy that in the first batch file to the %systemroot%\system32 folder, then run it. I've got this so far
subinacl /KEYREG HKEY_LOCAL_MACHINE\SOFTWAR
However, it will not apply to the subkeys (sub hives) in the registry. Any idea what I am missing?
I think I've made some progress. I took your advice by adding the SUBINACL file to a shared drive. I can just copy that in the first batch file to the %systemroot%\system32 folder, then run it. I've got this so far
subinacl /KEYREG HKEY_LOCAL_MACHINE\SOFTWAR
However, it will not apply to the subkeys (sub hives) in the registry. Any idea what I am missing?
ASKER
Sir,
I think I got it. I need to use 'SUBKEYREG' for all the sub hives/directories.
I think I got it. I need to use 'SUBKEYREG' for all the sub hives/directories.
Sorry about that - got pulled away, but looks like you found the magic key! :^)
ASKER
yeah, thanks. I now have to figure out how to install a printer- IP printer through batch.
If you know a way, let me know- or I'll just make a new post.
If you know a way, let me know- or I'll just make a new post.
Hmm - sorry...not my strong suit anymore (4 years ago maybe :).
I avoid printers until I have to print out my expense reports or income tax copies... : )
I avoid printers until I have to print out my expense reports or income tax copies... : )
ASKER
haha- Okay, I appreciate the help.
Thanks
Thanks
Happy to assist - thanx for the grade! :^)
ASKER
But now this file has to be installed on the PC that is running the batch. There is no way to do it in Win XP w/o an additional too?