Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1477
  • Last Modified:

Registry Permissions

Somehow the registry permission on one of my Windows 2008 R2 Servers got corrupt and it is preventing a number of servies from starting properly.  Is there a way to extra the Registry Permissions from another Windows 2008 R2 box and apply just the permissions to the box that is now messed up?
0
commeng
Asked:
commeng
  • 2
  • 2
3 Solutions
 
Darius GhassemCommented:
No since registries for both servers are different. Do you have a backup of SYSVOL? If you do then restore Registry from backup.

You can try last known good option as well
0
 
SommerblinkCommented:
Have you simply considered restoring from a good backup?

As far as 'permission' problems. Are you refering to the NTFS permissions on the actual files which house the registry, or are you refering to the permissions to keys and values within the registry.
0
 
commengAuthor Commented:
I am talking about permissions to Keys and Values within the registry.
0
 
Darius GhassemCommented:
Doesn't matter the keys are different from server to server because of different services that are running on the servers.

Do you have a backup?
0
 
SommerblinkCommented:
To be honest, given that a 'standard' user couldn't get into regedit to make changes to the permissions to registry keys and values, I would begin to seriously question the virginity of your server and that it should at this point represent a comprimised system on your network and dealt with accordingly.

This is, unless you know EXACTLY how this happened.

Meanwhile, you can read up on http://support.microsoft.com/kb/313222.
One thing in there, Microsoft mentions SubInACL, which you can download from http://www.microsoft.com/downloads/en/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B

Now, the readme for SubInACL mentions its only compatible upto 2003... so, your mileage may vary.

But to be honest, I would remove the data off the machine and simply redeploy. I believe that you will be better served in the long run with this... since you are really going deep into the details of the server and if there are any differences between the server you try to copy the security settings from onto this server, you may end up with more weirdness than you already have.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now