Group Policy modifying Registry Keys

Good Morning,

I had a question regarding Resistry Keys and Group Policy. Here
is my scenario: I have Windows 2003 Servers pushing out group policy to
2000/XP workstations. Recently I had to implement a very small software
program that creates two registry keys on the user's local machine. The
problem with this is that the two keys default to Administrator Full
permissions and Everyone Read. When a user trys to read them upon windows
startup they get errors reading the registry keys and the program won't
execute. I went into one test machine, changed the permission for that
program's registry keys to everyone full and it worked fine. I have also
removed all users from any administrative or power user groups.
The final step is to now change these registry keys either via
group policy or some other automated way. I don't have the time to
physically go to each computer's registry to make the modification. A
proposed solution would be greatly appreciated. Thank You for your time.

The two Reg Keys are:

Hkey_Local_Machine\Software\Microsoft\Windows\Curr entversion\Run

Hkey_Local_Machine\Software\Threeleaf\ERB



Dave Leonardi

Try the REG ADD command (do a REG ADD /?). You can script this and
run it locally or apply the changes to either the login script or the
group policy startup script...

Jeffrey Randow (Windows Networking & Smart Display MVP)
jeffreyr-(E-Mail Removed)

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

On Wed, 12 May 2004 10:17:23 -0400, "Dave Leonardi"
<(E-Mail Removed)> wrote:

>Good Morning,
>
> I had a question regarding Resistry Keys and Group Policy. Here
>is my scenario: I have Windows 2003 Servers pushing out group policy to
>2000/XP workstations. Recently I had to implement a very small software
>program that creates two registry keys on the user's local machine. The
>problem with this is that the two keys default to Administrator Full
>permissions and Everyone Read. When a user trys to read them upon windows
>startup they get errors reading the registry keys and the program won't
>execute. I went into one test machine, changed the permission for that
>program's registry keys to everyone full and it worked fine. I have also
>removed all users from any administrative or power user groups.
> The final step is to now change these registry keys either via
>group policy or some other automated way. I don't have the time to
>physically go to each computer's registry to make the modification. A
>proposed solution would be greatly appreciated. Thank You for your time.
>
>The two Reg Keys are:
>
>Hkey_Local_Machine\Software\Microsoft\Windows\Cur rentversion\Run
>
>Hkey_Local_Machine\Software\Threeleaf\ERB
>
>
>
>Dave Leonardi
>