• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 302
  • Last Modified:

Transfer Registry ACLs to a different system-

OK guys- here's what happened.

A Group Policy was applied to out Domain (400+ Machines) that re-permissioned the entire subordinate registry keys etc. on HKLM\System & HKLM\Software. We are scrambling to first find the correct permissions of keys identified as wrong and then push these out in GP to repair this oversight.  I'm looking for a way to take an ACL 'snapshot' of a known good registry, edit that, and apply to all affected machines. Looking to do this for Windows XP and Windows 7 workstations. I have a ticket open with Microsoft and they are telling me I need to manually 'find' the incorrect keys and script the fixes. While pushing out the fixes are not the issue- finding the wrong keys from problems known and unknown will be tremendous.

Anyone have any Ideas?
0
MDAARC
Asked:
MDAARC
  • 2
1 Solution
 
johnb6767Commented:
Reset the entire registry permissions to defaults
http://www.windowsreference.com/security/reset-the-entire-registry-permissions-to-defaults/

Personally, I would also add "Users" with "READ" permissions, on HKLM.....
0
 
MDAARCAuthor Commented:
We ran system restore on each system to resolve issue.

Thanks,
0
 
MDAARCAuthor Commented:
This was the fix...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now