Re: Default Regitry Permissions

"G. Stoynev" <gstoynev@xxxxxxxxx> wrote in message
news:1161206786.232071.150850@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Thank you for your reply. My comments are below.

Roger Abell [MVP] wrote:
Your registry seems to have been changed as what you state
to be the ACL on HKLM\Software\Classes is not what is set
by default, at least with a clean install (I am not sure what you
would see on a machine upgraded to W2k3 or R2 from earlier
versions with a history of upgrade clear back to NT 4)

Can't comment on that as I didn't take a note what the ACL looked like
freshly installed. But it's a clean 2003 install and R2 immediately
after that.


default ACL'ing runs:

System Full Key+Subkeys
Administrators Full Key+Subkeys
Users Read Key+Subkeys
Creator Owner Full Subkeys
Power Users Special Key+Subkeys
(where PU exists; Special = Full less Create link, Write DAC, Write Owner)

How are you determining it is Everyone Full on your clean install ?



It is my understanding that just using regsvr32 would add the
reg entries allowing them to have an initial ACL as determined
from the ACL on their parents. This is apparently not happening
for you, but you do not indicate use of an installer that might be
adjusting the ACL after regsvr32 runs.

No installer involved. I run regsvr32 and immediately after that I
check the permssions.


What are the permissions you are seeing?

PS
SP1 for W2k3 R2 has not come out
Control Panel->System displays exactly the following string:
Microsoft Windows Server 2003 R2
Standard Edition
Serviec Pack 1


Well, I guess you cannot believe that interface then.
(Note that W2k3 R2 initial relase was in lock-step with W2k3 Sp1)


.

Relevant Pages

  • Re: Event ID 55 After SP1 Install on Win Server 2003
    ... This is a backup server. ... Windows Server again (along with SP1) and then install our backup ... ACL data to replace the corrupt C:\$Secure, ...
    (microsoft.public.windows.server.general)
  • RE: SQL Server 2005 faulure when updating to SP1
    ... When installing the Service Pack, ... SQL Server 2005 faulure when updating to SP1 ... During the install, users that are having this same problem get ... Configuring ACL: ...
    (microsoft.public.sqlserver.setup)
  • Re: OSX 10.5.6 questions
    ... Archive & Install. ... all applications seem to be working as they should, ... 45 minutes to verify permissions! ... I wonder if these ACL violations refer to ...
    (uk.comp.sys.mac)
  • Re: Default Regitry Permissions
    ... at least with a clean install (I am not sure what you ... Can't comment on that as I didn't take a note what the ACL looked like ... But it's a clean 2003 install and R2 immediately ... Microsoft MVP ...
    (microsoft.public.windows.server.security)
  • Re: Cannot install new printer drivers
    ... appeared in both the website and the newsgroup. ... and now I can install printers just the way I used to! ... Subfolder "3" must have had a NULL ACL, that is, no ACL, which means ... I could delete printers because subfolder "3" had a NULL ACL. ...
    (microsoft.public.windowsxp.print_fax)