Registry Editing Permissions and Winbatch

Keywords: 	 Registry Editing Permissions 

---

Question:

If a user is restricted from manually editing their registry, will any or all of the registry functions work - such as Regquerykey,Regueryvalue, RegOpenkey.

Answer:

It depends how they are prevented from altering the registry.

1. If you just delete regedit, then Winbatch can alter the registry.

2. If you use policies or permissions, then WinBatch - jsut like the user - is prevented from altering the registry.

3. There may be workaround. I'm not sure if the wntRunAsUser function found in the NT network extender can work around policies.

4. Often users are prevented from editing the registry by a policy. If that's the case, they simply cannot execute Regedt32.exe and Regedit.exe. Attempting to run one of these programs produces a grey dialog box with a message like "Registry editing has been disabled by your administrator". If you get this message then any other reg editing tool will work fine, including Winbatch.

   This does not address security placed on any key. If registry security is applied, then you can run reg edit tools, but they may fail to access some or all of the keys and values.

---

Article ID:   W14707

Filename:   Registry Editing Permissions and Winbatch.txt