[THIN] Re: SV: GPOs being applied?
- From: DMelczer@xxxxxxxx
- To: thin@xxxxxxxxxxxxx
- Date: Fri, 10 Oct 2003 07:02:16 -0400
Thanks for all of the help...
It turns out it was a recent change, so we went to each user that got the
template profile over the last week and loaded their HKCU hive and just
changed the permissions to propagate from what was in the registry branch
above.
A little time consuming, but not terrible.
Of course, we also changed the template so that this doesn't happen again...
;-)
-Dave Melczer
dmelczer@xxxxxxxx <mailto:dmelczer@xxxxxxxx>
-----Original Message-----
From: Braebaum, Neil [mailto:Neil.Braebaum@xxxxxxxxxxxxxxxxx]
Sent: Friday, October 10, 2003 5:07 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: SV: GPOs being applied?
REGINI.EXE always used to allow you to alter DACLs in the registry.
Otherwise you're pretty stuffed, it's rather complex to do this with
something like vbscript / ADSI (you'd need the ADSI SDK and some of it's
objects to script it via this method).
Neil
-----Original Message-----
From: DMelczer@xxxxxxxx [mailto:DMelczer@xxxxxxxx]
Sent: 09 October 2003 20:15
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: SV: GPOs being applied?
Actually, I think I've found the answer.
We create a default template based on a single user...someone must have
logged in as this user and had the policies key created with only them and
admins having permissions to access the registry keys.
Of course, when this is propagated to another user, all hell breaks loose
because other users can't modify the keys when the GPO comes down...
Anyone have a utility to modify registry key security?
*********************************************** This e-mail and its
attachments are confidential and are intended for the above named recipient
only. If this has come to you in error, please notify the sender immediately
and delete this e-mail from your system. You must take no action based on
this, nor must you copy or disclose it or any part of its contents to any
person or organisation. Statements and opinions contained in this email may
not necessarily represent those of Littlewoods. Please note that e-mail
communications may be monitored. The registered office of Littlewoods
Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB.
Registered number of Littlewoods Limited is 262152.
************************************************
**********************************************************************
Please be advised that this transmittal may be a confidential attorney-client
communication or may otherwise be privileged or confidential. If you are not
the intended recipient, please do not read, copy or re-transmit this
communication. If you have received this communication in error, please notify
us by e-mail (postmaster@xxxxxxxx) or by telephone (call us collect at
212-403-4357) and delete this message and any attachments. Thank you in advance
for your cooperation and assistance.
www.wlrk.com
**********************************************************************
Other related posts:
