Re: enable SE_TAKE_OWNERSHIP privilege

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 08/01/02 

From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Thu, 1 Aug 2002 00:24:34 -0700

The two current .\Policy subtrees are volatile.
The policy engine refreshes the values based on
the local and when applicable domain GPO
If you want to influence the values at the reg path
you mentioned, you should do this via policies.
All registry keys/values have ACLs on them, and
these control what accounts can read/write etc.
It will most likely require admin access to modify
what the pre-existing ACLs are.
It is not polite for an app to modify things in the
specific areas about which you inquire. 

--
Roger Abell
MS MVP (Windows Platform), MCSE, MCDBA
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
"Conrad" <conradh@midmo.com> wrote in message
news:3c0a01c238ae$9797ad00$36ef2ecf@tkmsftngxa12...
> Is there no way to edit or add keys by code from a
> limited user account? When the policy engine is changing
> them? Or is there a way to set it under the admin account
> so it carries over?
> Thanks,  Conrad
>
>
> >-----Original Message-----
> >The .\Policy keys are set by the policy engine, and
> >are volatile.
> >That is likely the source of the resets you observe.
> >
> >--
> >Roger Abell
> >MS MVP (Windows Platform), MCSE, MCDBA
> >Associate Expert - Windows XP ExpertZone
> >http://www.microsoft.com/windowsxp/expertzone
> >
> >"Conrad" <conradh@midmo.com> wrote in message
> >news:321801c23853$c3e94180$9be62ecf@tkmsftngxa03...
> >> I need to have write access to the registry key under
> >> CurrentUser\Software\Policies. How can I use api
> calls/vb
> >> code to enable the correct privileges and allow write
> >> access? I can successfully edit the ACE's (using low
> >> level code), but they disappear for this section of the
> >> registry. Editing the "Restricted" user to Full access
> >> does not carry over to the limited user. It is changed
> to
> >> Read only.  Thanks.
> >
> >
> >.
> >

Relevant Pages

  • Re: enable SE_TAKE_OWNERSHIP privilege
    ... Is there no way to edit or add keys by code from a ... When the policy engine is changing ... >> does not carry over to the limited user. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Enable users to modify Protected Registry Keys
    ... What I referred to as the policy engine is the code on the client ... side that is responsible for enforcing the defined policies. ... not "I am trying to change the permissions on these keys" ... >> Microsoft MVP (Windows Server System: ...
    (microsoft.public.windows.group_policy)
  • Re: Enable users to modify Protected Registry Keys
    ... Can I add these changes in permissions to the policy engine? ... > That would be a pretty poor idea as these keys are what the system ... >> By default users are not able to modify registry keys under ...
    (microsoft.public.windows.group_policy)