Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Registry Permissions - Ownership Denied

Posted on 2013-12-04
2
Medium Priority
?
367 Views
Last Modified: 2013-12-13
Hello EE,
I'm working on a Windows Server 2008 R2.  I was delayed installing some proprietary business applications. The installers could not access important registry keys.

HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components… etc. etc.

Simply clicking the reg keys in question produced access denied messages. I tried to take ownership of the keys and I was met with additional denied messages.  Over time I realized that the denied message was incorrect or partial.  I was finally gaining ownership.  I simply had to quit the propertied dialog box and open it again.

Then I was permitted to add a user. After I added my user multiple users were revealed to have prior security permissions.

Some keys parents/grandparents required multiple attempts to gain ownership of all children. Eventually I got it.

How can reg permissions be hidden/suppressed and then uncovered again?

Does this reveal anything about the server as a whole?  Prior virus activity?  General corruption?

The server is running and the new software is running. I'm viewing with skepticism.
KG
0
Comment
Question by:kengreg
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 6

Accepted Solution

by:
donnk earned 1000 total points
ID: 39697549
trusted installer can tinker with permissions as you have found.

Sometimes we use "psexec -i -d -s c:\windows\regedit.exe" as the big gun method which overrides permission issues.
0
 

Author Closing Comment

by:kengreg
ID: 39716383
I did not use the psexec solution mentioned above, but I'm still awarding points because it's a valid option under difficult circumstances. It's also the only feedback received.

In my case I repeatedly tried to take ownership of the difficult reg tree.  After four or five tries something finally completed and I had ownership.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Getting to know the threat landscape in which DDoS has evolved, and making the right choice to get ourselves geared up to defend against  DDoS attacks effectively. Get the necessary preparation works done and focus on Doing the First Things Right.
Check out the latest tech news, community articles, and expert highlights in August's newsletter.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question