|
Posted by Steven L Umbach on January 29, 2006, 1:32 pm
Please log in for more thread options
You could use Group Policy/Windows settings/security settings - registry on
that OU and configure permissions for the machine key that also includes
your developed group. Before you do such be SURE to test to out on a test
OU with a couple test computers in it to make permissions are exactly what
you want including all the current groups [system, administrators, users,
your group], subkey permissions and inheritance compared to a computer that
has default settings and those computer function fine so that you do not
have all your computers in the OU where users can not logon to. Registry
permissions are NOT rolled back if you unlink the GPO that contains them and
you must specify all the groups that you want to have permissions in Group
Policy/Registry - not just the group you want to add. You can use the mmc
snapin for security templates to see how some templates use Registry. ---
Steve
> as administrator of of a develpment company, How do i give access to my
> developers to modify the HKEY_LOCAL_MACHINE hive on member systems
> running windows xp pro and windows server 2003, located within my
> eastern division ou, all of the developers are located in the eastern
> division ou, usig security templates and GPO's?
>
| 
XML Sitemap