Re: HKEY_CURRENT_USER\SOFTWARE\CLASSES

From: Kent W. England [MVP] (kwe@mvps.org)
Date: 07/03/02 

From: "Kent W. England [MVP]" <kwe@mvps.org>
Date: Tue, 2 Jul 2002 15:50:25 -0700

I thought XP allowed users to write anywhere in HKCU. However, if not,
you could change the permission on the CLASSES keys that this
application uses to allow limited accounts (ie, members of the Users
group) to write to this key.

I don't know of any tools to change permission keys in registry hives,
but that might be the best way to roll this out to your installation. It
may be that the permission change is only a temporary requirement.

Of course, if you can export the key and that works well, you can
include a reg.exe command in a script to import that key for each user. 

--
Kent W. England, MS MVP for Windows XP
(Please respond only in the newsgroup)
Steve Wichelt <steve.wichelt@integic.com> wrote:
> I have a product that when first run by a user tries to
> write COM information into the
> HKEY_CURRENT_USER\SOFTWARE\CLASSES key.  If the user is a
> member of the Administrator group everything works fine.
> If the user is a member of the USERS group the update to
> the key fails.  On NT and WIN9X system the information is
> written into the HKEY_CLASSES_ ROOT section of the
> registry.  Microsoft added the
> HKEY_CURRENT_USER\SOFTWARE\CLASSES registry with the
> release of 2000 and XP.  Why can't a user write into their
> own registry location when a member of USER group.
>
> I believe the software is using the
> msidbRegistryRootClassesRoot constant to identify location
> of registry entries during a per-user installation or
> first time product runs.
> See
> http://msdn.microsoft.com/library/en-us/msi/tref_3obp.asp?
> frame=true
>
> My work around has been to export the registry info for
> the key from the Admin user and import into the standard
> user.  I can import into the key but this program fails to
> write into the key whenever I run it as a regular user.
>
> I have thousands of users that will be upgrading to XP and
> have run this program for years on NT with no problem.
> HELP!!!
>
> Thanks,
>
> Steve Wichelt

Relevant Pages

  • HKEY_CURRENT_USERSOFTWARECLASSES
    ... member of the Administrator group everything works fine. ... If the user is a member of the USERS group the update to ... HKEY_CURRENT_USER\SOFTWARE\CLASSES registry with the ... I can import into the key but this program fails to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User/Group Permissions from Code
    ... from the member! ... > Are all your users members of the Users Group? ... >> Yes, I use similar code, however, when I call the IsInGroup function, I ... >> group has read permission on them, thus I can't edit the permissions. ...
    (microsoft.public.access.security)
  • Re: "Write permission" question.
    ... Peter T. Breuer wrote: ... > of which I am a member. ... Write permission in the directory *for the ... all accounts are members of the users group, ...
    (comp.os.linux.misc)
  • You cant view this objects permissions
    ... the Users Group has admin permission on the database. ... MyUser is a member of the Users Group. ... Admin permission on the database object, I should be able to see the ...
    (microsoft.public.access.security)
  • how to enable a common user to install software in a win2k os?
    ... i want to enable a user which is a member of the "users" ... group to install software, but i won't move it to the ... add "full control" permission for the registry to ...
    (microsoft.public.win2000.security)