Solved

TIF file association keepts dissappearing

Posted on 2009-05-19
10
707 Views
Last Modified: 2012-05-07
I'm running a Windows Server 2003 domain, and I'm having a problem with machines on the network. None of the users have administrator rights, but one various, random computers the TIF file association in Folder Options>File Types  keeps dissappearing. I haven't been able to figure out what is causing these to dissappear - the users don't have the rights to change them. Any ideas on how to lock this down, maybe by GP? or create a GP to force this file type association?

The other side of this question is: as a domain admin, is there a way i can connect to the client PC, running WIin XP Pro, and manually restore the file types without having to interrupt the user by logging him off and logging on as ad admin?
0
Comment
Question by:jdecaria
  • 6
  • 4
10 Comments
 
LVL 17

Expert Comment

by:Jared Luker
ID: 24423984
Do you have startup scripts running?  You could import a .reg file in your startup scripts that could restore those types of settings.
0
 
LVL 17

Expert Comment

by:Jared Luker
ID: 24424004
0
 

Author Comment

by:jdecaria
ID: 24424150
I want to somehow lock these file type to prevent them from being changed in the first place. I can't figure out how they'er being randomly deleted...
0
 
LVL 17

Expert Comment

by:Jared Luker
ID: 24424289
Something is changing those registry keys.  You can set permissions on those keys mentioned in that article to a select few users and see if that resolves the problem.
0
 

Author Comment

by:jdecaria
ID: 24424447
currently user "system" has full control over this entry - can i change that so the system has only read access for this entry?
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 17

Expert Comment

by:Jared Luker
ID: 24424988
Sure... that should not hurt anything.  If your users are local admins, I would be more inclined to make the local admin group read only on that key.
0
 

Author Comment

by:jdecaria
ID: 24425619
if i make that change on one computer, then export the key, when i import the key, will the security settings follow it? or is this something i have to do manually on every  computer?
0
 
LVL 17

Expert Comment

by:Jared Luker
ID: 24425802
No... you would have to do it to each machine.  You can automate it with the use of a tool and a batch file.

http://support.microsoft.com/kb/264584

OR... you could find out what it is that's changing the association.  That's easier said than done.
0
 

Author Comment

by:jdecaria
ID: 24425973
when this problem comes up, which is about once every two weeks, i have to connect to the users machine, make the user log off so i can log on with an admin account, and then i go into "My computer" and manually restore the file association. I'd like to find a way of doing this that  would not make me interrupt the user's session.
i tried remote desktop but XP pro won't allow me to log on without interrupting the user's session.

this registry entry is located in the HKEY_CLASSES_ROOT directory of the registry. when i connect to a user's registry remotely, i can't view this directory. is there a way for me to add this file association to a computers's registry remotely without interrupting the user?  

i'd rather do this once a week than putting scripts in AD, or spending  a whole week finding out what is randomly causing this to happen.
0
 
LVL 17

Accepted Solution

by:
Jared Luker earned 500 total points
ID: 24426043
I don't know of a way to play with HKCR remotely.  

Locally, you can just use runas to execute regedit.exe to import the registry key.  The user will not have to log out in that case:

runas /user:domain\AdminAccount regedit /s TiffFix.reg

Drop that into a batch file.  

Run the batch file and put your password in and it should be good to go.

As an alternative, you could give domain users access to that registry key through the methods mentioned above.  Then you could drop that reg file on their desktop and they could just double click on it when they see the problem arise.

0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Ok I have been working on this for some time having learned and gained certification in XenDesktop 4 along came version 5 which was released last month. Since then I have been working to deploy XenDesktop 5 in a small environment with only 2 virt…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now