Changing security settings on registry keys and folder with script?

X-posted to:
microsoft.public.scripting.wsh;
microsoft.public.scripting.vbscript

Hi everyone!

System is Windows XP Pro pcs on a Server 2003 Domain. I need to give normal
users (either groups "everyone" or "users") write access to certain registry
keys (and sub keys) and folders (and subfolders). Basically, critical apps need
admin rights by default, which we are not going to give. :-)

I have to do this on many pcs, so think a script would be easiest. I have
downloaded the TechNet Script Center package, but haven't found a template
suitable for either application.

Could someone please advise on what commands I need, or privide some template
examples. If so, I'd really appreciate it. Any help or tips appreciated too. :-)

Many thanks in advance.
grol

Jerold
Mon Mar 14 07:00:42 CST 2005

On Mon, 14 Mar 2005 09:34:23 +1300, "grol" <grolschie@NOSPAM.gmail.com> wrote:

>X-posted to:
> microsoft.public.scripting.wsh;
> microsoft.public.scripting.vbscript
>
>Hi everyone!
>
>System is Windows XP Pro pcs on a Server 2003 Domain. I need to give normal
>users (either groups "everyone" or "users") write access to certain registry
>keys (and sub keys) and folders (and subfolders). Basically, critical apps need
>admin rights by default, which we are not going to give. :-)
>
>I have to do this on many pcs, so think a script would be easiest. I have
>downloaded the TechNet Script Center package, but haven't found a template
>suitable for either application.
>
>Could someone please advise on what commands I need, or privide some template
>examples. If so, I'd really appreciate it. Any help or tips appreciated too. :-)
>
>Many thanks in advance.
>grol
>
>
See SETACL from tip 3583 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com

Gerry
Tue Mar 15 06:19:17 CST 2005

Jerold Schulman wrote:

> See SETACL from tip 3583 in the 'Tips & Tricks' at http://www.jsiinc.com

Nice!

Al Dunbar might be interested in

<http://setacl.sourceforge.net/html/doc-basics.html>

Section 8 (scroll way down).

It covers a similar topic to what we were discussing on here recently.

--
Gerry Hickman (London UK)

Al
Wed Mar 16 00:15:11 CST 2005


"Gerry Hickman" <gerry666uk@yahoo.co.uk> wrote in message
news:%23URxpkVKFHA.656@TK2MSFTNGP14.phx.gbl...
> Jerold Schulman wrote:
>
> > See SETACL from tip 3583 in the 'Tips & Tricks' at http://www.jsiinc.com
>
> Nice!
>
> Al Dunbar might be interested in
>
> <http://setacl.sourceforge.net/html/doc-basics.html>
>
> Section 8 (scroll way down).
>
> It covers a similar topic to what we were discussing on here recently.

Brilliant! Thanks. Best and most concise explanation I have seen so far. Now
all I need is a slightly more detailed definition of the bits in the access
mask that goes just the teeniest bit farther than this kind of thing:

read - gives read access
write - gives write access
glrp - gives grlp access


/Al

grol
Fri Mar 18 03:34:45 CST 2005


"Jerold Schulman" <Jerry@jsiinc.com> wrote in message
news:4n2b31h353cfvqufq5e7jr21mhk5arrv1c@4ax.com...
> On Mon, 14 Mar 2005 09:34:23 +1300, "grol" <grolschie@NOSPAM.gmail.com> wrote:
>
> >X-posted to:
> > microsoft.public.scripting.wsh;
> > microsoft.public.scripting.vbscript
> >
> >Hi everyone!
> >
> >System is Windows XP Pro pcs on a Server 2003 Domain. I need to give normal
> >users (either groups "everyone" or "users") write access to certain registry
> >keys (and sub keys) and folders (and subfolders). Basically, critical apps
need
> >admin rights by default, which we are not going to give. :-)
> >
> >I have to do this on many pcs, so think a script would be easiest. I have
> >downloaded the TechNet Script Center package, but haven't found a template
> >suitable for either application.
> >
> >Could someone please advise on what commands I need, or privide some template
> >examples. If so, I'd really appreciate it. Any help or tips appreciated too.
:-)
> >
> >Many thanks in advance.
> >grol
> >
> >
> See SETACL from tip 3583 in the 'Tips & Tricks' at http://www.jsiinc.com

Thanks man. :-)