Re: Command-line registry ACL editting

From: Drew Cooper [MSFT] (dcoop_at_online.microsoft.com)
Date: 04/13/04 

Date: Mon, 12 Apr 2004 16:18:55 -0700

Sorry. I really don't have an solution for that. 

-- 
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
"cquirke (MVP Win9x)" <cquirkenews@nospam.mvps.org> wrote in message
news:vsik701okptf67el2sdl5ubgv89e4uhek9@4ax.com...
> On Fri, 9 Apr 2004 12:46:00 -0700, "Drew Cooper [MSFT]"
>
> >That I don't know.  I haven't used subinacl for SACLs.  According to the
> >documentation, it's supposed to add ACES when you "/sgrant" and "/sdeny",
> >not overwrite the previous SACL.  If it's not doing that, I don't know
what
> >to tell you.
>
> Wow, that went swish! over my head - my per-word comprehension of this
> paragraph is low even by OCR standards   :-)
>
> Does XP contain a reference on this stuff?
>
> And can you help me with the HOLY GRAIL:
>
> 1)  Getting non-default settings to "stick" in XP Home
>      user accounts that are set to sub-Admin permissions
>
> 2)  Setting up the new user account prototype so that all
>      newly-created accounts are born with the above
>      non-default settings as well as custom shell folder paths
>
> OK, make that two Holy Grails    :-)
>
> Seriously, without both of these in place, limited and multiple user
> accounts remain unfit for use in XP Home.
>
> I've read an MS article on how to transfer contents of an existing
> non-admin account to the Default account (from which newly-created
> accounts inheret content).  Two problems:
>   - this excludes the registry, thus all registry settings
>   - some settings are inherited from "somewhere else"
>
> So I still have stick to one account, full admin permissions, if I
> want the safety afforded by settings like "don't hide extensions",
> "show all paths and files" etc. and the speed, managability and
> survivability benefits of data relocated over multiple HD volumes.
>
>
>
> >-------------------- ----- ---- --- -- - -  -   -
>   Running Windows-based av to kill active malware is like striking
>   a match to see if what you are standing in is water or petrol.
> >-------------------- ----- ---- --- -- - -  -   -

Relevant Pages

  • Re: Should programs install to All Users, Default User, or Me?
    ... >>>> ...where you have to duplicate settings to each account by hand. ... >> the workplace foisted on one as a single user. ... >>>always log on as admin - this may not be good for normal folk, ... >> don't know in advance what accounts will exist, ...
    (microsoft.public.windowsxp.general)
  • Re: Which Settings MUST be assigned to a User?
    ... specifically applied only to user accounts or computer accounts. ... HKEY_LOCAL_MASHINE values and user configuration modiefies the ... the settings in the User Configuration part ... GPO, with User Configuration settings in it, is applied. ...
    (microsoft.public.windows.group_policy)
  • Can someone please help?????
    ... >terrible time setting up my multiple user accounts. ... >have one Administrator account and two other accounts ... >software, change system settings, etc. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Summary (Re: XP: Cool feature with a weakness)
    ... since it affected other accounts than the one rotating the ... settings are stored on a user-by-user basis. ... Yes, Steve *wanted* to claim that, and even did... ... Funny how Snit allows himself to point to posts (that are even way out ...
    (comp.sys.mac.advocacy)
  • Re: Outlook - can receive message but not send messages
    ... You could also use the TEst Account Settings feature found further in this ... Milly Staples [MVP - Outlook] ... | (2 accounts) and everything worked okay. ... Therefore I deleted both my email accounts, ...
    (microsoft.public.office.misc)
Quantcast