Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

The permissions on HKEY_CURRENT_USER are incorrectly ordered

Posted on 2010-08-30
7
Medium Priority
?
1,872 Views
Last Modified: 2012-05-10
When I use REGEDT32, and attempt to view the permissions on the CURRENT_USER hive, I recieve the following error  (also see attached screenshot):

The permissions on HKEY_CURRENT_USER are incorrectly ordered, which may cause some entries to be ineffective.  Press OK to continue and sort the permissions correctly, or Cancel to reset the permissions.

I believe that this condition corresponds to the failure of a Group Policy to be applied.
On machines where the registry permissions are "incorrectly ordered", the GPO fails.
The group policy is for Internet Explorer, the DC is Windows 2003, and the target machine is also W2K3.

I have already applied the suggested Microsoft hotfix for this issue (which assigns a new SID), but it did not work.
http://support.microsoft.com/kb/899182

I'm trying to find out if this can be fixed by modifying the permissions on the CURRENT_USERS hive.
Alternatively, I hope to find out if there is anything that can be done in Active directory or the Group Policy, in order to fix the permissions on this hive or allow the Group Policy to write to it.

Thanks!
CURRENT-USER-PERMISSIONS.JPG
0
Comment
Question by:mmahelpdesk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 41

Expert Comment

by:Kyle Abrahams
ID: 33560639
0
 
LVL 41

Expert Comment

by:Kyle Abrahams
ID: 33560655
Disregard, was for something else.
0
 
LVL 41

Expert Comment

by:Kyle Abrahams
ID: 33560689
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 1

Author Comment

by:mmahelpdesk
ID: 33560716
Thanks for asking, but no - XCALCS has not been used.
0
 
LVL 4

Expert Comment

by:vnicolae
ID: 33562271
0
 
LVL 1

Author Comment

by:mmahelpdesk
ID: 33562595
vnicolae,

Thanks for the info... I'll check this out as soon as I can get people logged out.
0
 
LVL 1

Accepted Solution

by:
mmahelpdesk earned 0 total points
ID: 33580967
Microsoft took a look at this issue. The permissions were insufficient for the Everyone group on the CURRENT_USERS hive. Don't know how this got changed in the first place.

Thank for the good tips, everyone!
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question