Registry Editing Permissions and Winbatch
Keywords: Registry Editing Permissions
Question:
If a user is restricted from manually editing their registry, will any or all of the registry functions work - such
as Regquerykey,Regueryvalue, RegOpenkey.
Answer:
It depends how they are prevented from altering the registry.
- If you just delete regedit, then Winbatch can alter the registry.
- If you use policies or permissions, then WinBatch - jsut like the user - is prevented from altering the registry.
- There may be workaround. I'm not sure if the wntRunAsUser function found in the NT network extender
can work around policies.
- Often users are prevented from editing the registry by a policy. If that's the case, they simply cannot
execute Regedt32.exe and Regedit.exe. Attempting to run one of these programs produces a grey dialog
box with a message like "Registry editing has been disabled by your administrator". If you get this message
then any other reg editing tool will work fine, including Winbatch.
This does not address security placed on any key. If registry security is applied, then you can run reg edit
tools, but they may fail to access some or all of the keys and values.
Article ID: W14707
Filename: Registry Editing Permissions and Winbatch.txt
File Created: 2000:08:08:11:07:36
Last Updated: 2000:08:08:11:07:36