On Thu, Sep 8, 2011 at 2:10 PM, Bernard, Norm <[email protected]> wrote: > What I need to do is change the permissions on all system’s HKCU (or all > user hives if possible!). Specifically I need to change > HKCU\Software\Policies\ permissions to allow current user the right to > create/edit sub keys/values
(1) Users aren't allowed to make changes under HKCU\Software\Policies for good reason. A lot of sensitive configuration stuff lives under there. Opening it up to everyone would be a significant security exposure. (2) Even if you did, certain Group Policy operations can wipe out the changes you made there. (3) Damien Solodow is on the right track: The correct way to manipulate stuff under HKCU\Software\Policies is with Active Directory Group Policy. The Office Resource Kit (a free download from Microsoft) has ADM files you can load into the Group Policy Editor to give you access to all the Excel customization knobs. (4) As far as your "getting away from GPOs" goes, I think you're throwing the baby out with the bathwater. Huge numbers of poorly-organized, poorly-documented GPOs are bad, sure. That doesn't mean you can't have a well-documented, structured set of GPOs for your organization's needs. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
