Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1945
  • Last Modified:

The permissions on HKEY_CURRENT_USER are incorrectly ordered

When I use REGEDT32, and attempt to view the permissions on the CURRENT_USER hive, I recieve the following error  (also see attached screenshot):

The permissions on HKEY_CURRENT_USER are incorrectly ordered, which may cause some entries to be ineffective.  Press OK to continue and sort the permissions correctly, or Cancel to reset the permissions.

I believe that this condition corresponds to the failure of a Group Policy to be applied.
On machines where the registry permissions are "incorrectly ordered", the GPO fails.
The group policy is for Internet Explorer, the DC is Windows 2003, and the target machine is also W2K3.

I have already applied the suggested Microsoft hotfix for this issue (which assigns a new SID), but it did not work.
http://support.microsoft.com/kb/899182

I'm trying to find out if this can be fixed by modifying the permissions on the CURRENT_USERS hive.
Alternatively, I hope to find out if there is anything that can be done in Active directory or the Group Policy, in order to fix the permissions on this hive or allow the Group Policy to write to it.

Thanks!
CURRENT-USER-PERMISSIONS.JPG
0
mmahelpdesk
Asked:
mmahelpdesk
  • 3
  • 3
1 Solution
 
Kyle AbrahamsSenior .Net DeveloperCommented:
Disregard, was for something else.
0
 
Kyle AbrahamsSenior .Net DeveloperCommented:
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
mmahelpdeskAuthor Commented:
Thanks for asking, but no - XCALCS has not been used.
0
 
vnicolaeCommented:
0
 
mmahelpdeskAuthor Commented:
vnicolae,

Thanks for the info... I'll check this out as soon as I can get people logged out.
0
 
mmahelpdeskAuthor Commented:
Microsoft took a look at this issue. The permissions were insufficient for the Everyone group on the CURRENT_USERS hive. Don't know how this got changed in the first place.

Thank for the good tips, everyone!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now