Solved

The permissions on HKEY_CURRENT_USER are incorrectly ordered

Posted on 2010-08-30
7
1,733 Views
Last Modified: 2012-05-10
When I use REGEDT32, and attempt to view the permissions on the CURRENT_USER hive, I recieve the following error  (also see attached screenshot):

The permissions on HKEY_CURRENT_USER are incorrectly ordered, which may cause some entries to be ineffective.  Press OK to continue and sort the permissions correctly, or Cancel to reset the permissions.

I believe that this condition corresponds to the failure of a Group Policy to be applied.
On machines where the registry permissions are "incorrectly ordered", the GPO fails.
The group policy is for Internet Explorer, the DC is Windows 2003, and the target machine is also W2K3.

I have already applied the suggested Microsoft hotfix for this issue (which assigns a new SID), but it did not work.
http://support.microsoft.com/kb/899182

I'm trying to find out if this can be fixed by modifying the permissions on the CURRENT_USERS hive.
Alternatively, I hope to find out if there is anything that can be done in Active directory or the Group Policy, in order to fix the permissions on this hive or allow the Group Policy to write to it.

Thanks!
CURRENT-USER-PERMISSIONS.JPG
0
Comment
Question by:mmahelpdesk
  • 3
  • 3
7 Comments
 
LVL 39

Expert Comment

by:Kyle Abrahams
ID: 33560639
0
 
LVL 39

Expert Comment

by:Kyle Abrahams
ID: 33560655
Disregard, was for something else.
0
 
LVL 39

Expert Comment

by:Kyle Abrahams
ID: 33560689
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 1

Author Comment

by:mmahelpdesk
ID: 33560716
Thanks for asking, but no - XCALCS has not been used.
0
 
LVL 4

Expert Comment

by:vnicolae
ID: 33562271
0
 
LVL 1

Author Comment

by:mmahelpdesk
ID: 33562595
vnicolae,

Thanks for the info... I'll check this out as soon as I can get people logged out.
0
 
LVL 1

Accepted Solution

by:
mmahelpdesk earned 0 total points
ID: 33580967
Microsoft took a look at this issue. The permissions were insufficient for the Everyone group on the CURRENT_USERS hive. Don't know how this got changed in the first place.

Thank for the good tips, everyone!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now