pushing registry key security setting

[Brazen]

Most of us know how to set a key value automatically through group policy or scripting. But does anyone know what to set the security permissions on a key or tree automatically? Whether it be a script, something in group policy or anything! We have a software package that users need all rights to it's registry tree in order for the software to run correctly. I can push out the software package automatically through group policy no problem, but I [we] still have to manually open the registry and set the security permission on it's tree to full for everyone.

I would like for it to be set up so if the computer is on our domain, it gets the security permission automatically. The tree is under HKEY_LOCAL_MACHINE\SOFTWARE if that makes any difference.

 

[Brazen]

no takers?

 

[MrChad]

Your best bet is to look through the MSDN documentation. I found this page, but I'm not sure if that's what you're looking for.

 

[Brazen]

At first glance, it looks like there is a method in this document to set registry keys security. I wonder if it can be scripted or set to do it for every computer in or added to Active Directory. I'll have to read it over more and look up the details on the commands, and test it out. Thanks for the tip.

By the way: if anyone has the cliffnotes version of this documentation, feel free to let me have it.

 

[Woodie]

Here ya go

I think this is a much more useful tool, since it's meant for scripting rather than VB.

 

[Brazen]

EXCELLENT! Yes, this is exactly what I want.... simple and easy too.

 

[KB]

You can set the security rights using group policy too. Or you can use a security template inf file and import it using secedit.exe. To try what I am talking about open mmc and add the "Security Templates" snapin.

 

[Brazen]

Hey, you're right. I checked out the Security Templates snap-in and found the settings for registry and file permissions, then I found it in group policy. I had looked through group policy for this before but didn't notice or realize those settings before.