On a domain controller, the keys below are supposed to have identical
(default) REG_NONE values, and when they donâ??t, Kerberos is broken.
HKEY_LOCAL_MACHINE\SECURITY\Policy\PolAcDmN
HKEY_LOCAL_MACHINE\SECURITY\Policy\PolPrDmN
(to view anything under HKLM\Security, you need to give Administrators Full
Control to the permissions on the Security key)
Iâ??d like to write a script that compares those values and fixes them if
needed. But Iâ??ve yet to find a way to read or write a REG_NONE value with
vbscript or WMI.
Reg.exe handles REG_NONE values fine, but I donâ??t want to depend on it being
there since in 2000 reg.exe is in the support tools, not in the product like
XP/2003. And, those values almost never get mismatched in 2003, as there were
checks put in to verify they are consistent at boot.
Is there a way to manipulate REG_NONE values with stdregprov or wshshell?