Logon REGEDIT problem

[crazy]#

Hi all

I've got some W2K clients that give a REGEDIT error when logging on because of registry security. If the users are admin accounts its fine, if normal users its not. I cannot find any info on the KG on which registry key is important, or any way of getting round this problem. Anyone sorted it yet ??

Thanks

Ed

You can use "http://members.optushome.com.au/apastuhov/WindowsRegistryCommander.htm" and the following script to do this:

rem =====================================================
rem
rem Edit this file to set the User/Group name to grant
rem ALL Access Rights to (defaults to "USERS").
rem
rem Computer Network Names are read from a file named
rem PCList.TXT which must be located in the same folder
rem and contain a list of computers to agjust the access
rem right on (a ";" can be used to comment entries out,
rem the computer names should not have leading "\\"s).
rem
rem Due to the size of "HKLM\Software\Classes" it might
rem take a few minutes per machine to modify permissions
rem on this key, plus it may make the registry file
rem substantially larger if you need to adjust access
rem rights on this key.
rem
rem =====================================================

setlocal
set ACCOUNT=USERS
for /f "eol=; tokens=*" %%a in (PCList.TXT) do @call :GRANTPRIVS %%a %ACCOUNT%
endlocal
goto :eof

::--------------------------------------------
:GRANTPRIVS
RSC52 -m \\%1 -a %2 -r A -t GRANT -c -v -k "HKLM\SOFTWARE\Microsoft\Cryptography\RNG"
RSC52 -m \\%1 -a %2 -r A -t GRANT -c -v -k "HKLM\SOFTWARE\Microsoft\MSSQLServer\Client\TDS"
RSC52 -m \\%1 -a %2 -r A -t GRANT -c -v -k "HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths"
RSC52 -m \\%1 -a %2 -r A -t GRANT -c -v -k "HKLM\Software\JDEdwards"
RSC52 -m \\%1 -a %2 -r A -t GRANT -c -v -k "HKLM\Software\Classes"
goto :eof

There's a doc (OTI-01-0082) on the Knowledge Garden that discusses the problem of Windows 2000 registry issues.

See Document : OTI-01-0082