Disable load hive

  • Thread starter Thread starter Adam Barker
  • Start date Start date
A

Adam Barker

In the Windows 2000 server documentation on loading
registry hives
(http://www.microsoft.com/windows2000/en/server/help/defaul
t.asp?url=/windows2000/en/server/help/load_hive_reged.htm)

It states the following:

"You must be logged on as an administrator or a member of
the Administrators group in order to complete this
procedure. If your computer is connected to a network,
network policy settings may also prevent you from
completing this procedure."

How do you prevent (through network policy settings) local
administrators on Win2K pro boxes from loading registry
hives?
 
Hello Adam.

There is no method to restrict local administrators from loading registry
hives that they have read access to. A registry hive is simply a small
database file.

Please reconfigure the file permissions of the registry keys to prevent an
administrator from loading the hive. Note, please do not deny access to the
administrator of a client machine to the registry files that the system is
currently using--doing so will prevent logs by that user or other undesired
behaviors.

David Fisher
Enterprise Platform Support
 
I am the desktop (local) administrator who is trying to
figure out what the Network team here did, but the "Load
hive, unload hive, restore, and save key" are all grayed
out once the desktop is added to the OU and receive the
group policy.
 
Back
Top