Editing the registry

[Laser]

Can Power Users (as defined by XP-Pro) edit the registry?

Thanks,

Laser

 

[Torgeir Bakken \(MVP\)]

Can Power Users (as defined by XP-Pro) edit the registry?

Hi

Not everywhere in registry, but most places, yes.

 

[Laser]

Hi Torgeir,

Thanks for the quick response.

Is there a way to take that privilege away for all Power Users?

Laser

 

[Torgeir Bakken \(MVP\)]

Hi Torgeir,

Thanks for the quick response.

Is there a way to take that privilege away for all Power Users?

Hi

Write access most places was maybe a bit exaggerated.

Compared with the Users group, Power Users have write access to this
registry key (and below):

HKEY_LOCAL_MACHINE\Software

So if you in regedit right-click on this Software key and configure
the access for the Power Users as you see that Users are configured,
I think you have done most of the job.

 

[Laser]

Thank you,

Laser

Hi

Write access most places was maybe a bit exaggerated.

Compared with the Users group, Power Users have write access to this
registry key (and below):

HKEY_LOCAL_MACHINE\Software

So if you in regedit right-click on this Software key and configure
the access for the Power Users as you see that Users are configured,
I think you have done most of the job.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

 

[Colin Nash [MVP]]

Hi

Write access most places was maybe a bit exaggerated.

Compared with the Users group, Power Users have write access to this
registry key (and below):

HKEY_LOCAL_MACHINE\Software

So if you in regedit right-click on this Software key and configure
the access for the Power Users as you see that Users are configured,
I think you have done most of the job.

Of course, they aren't quite as much a "power user" any more

--
btw, to Laser:
All users can "edit the registry" under areas such the HKEY_CURRENT_USER ...
which is basically their own profile. You might disable tools like REGEDIT
via policy but the account will still have access to the parts of the
registry under its own profile (for example, apps that the user runs may
make changes to those keys)