Guest ashapadmanabhan Posted October 13, 2008 Posted October 13, 2008 Hi Please tell me whether Icacls can be used for Registry permission change in Windows Vista. I want to restrict users from accessing specific registry hive. In XP, I was using Subinacl.exe. The switch specified in sbuinacl is not available with Icacls. Please let me know, whether Icacls can be used for registry restrictions or any other tool available for doing that in Windows Vista. Thanks in Advance, Regards, Asha -- ashapadmanabhan Quote
Guest Mr. Arnold Posted October 13, 2008 Posted October 13, 2008 "ashapadmanabhan" <guest@unknown-email.com> wrote in message news:cb542fab7b6bc9291f345b765ba3e8e6@nntp-gateway.com...<span style="color:blue"> > > Hi > > Please tell me whether Icacls can be used for Registry permission > change in Windows Vista. > I want to restrict users from accessing specific registry hive. In XP, > I was using Subinacl.exe. The switch specified in sbuinacl is not > available with Icacls. > > Please let me know, whether Icacls can be used for registry > restrictions or any other tool available for doing that in Windows > Vista. ></span> http://technet.microsoft.com/en-us/library/cc753525.aspx Maybe, you need to read this stuff on how Vista protects itself from users by using UAC, Virtualization and WRP. <http://technet.microsoft.com/en-us/library/cc709691.aspx> <http://news.softpedia.com/news/Admin-Approval-Mode-in-Windows-Vista-45312.shtml> <http://technet.microsoft.com/en-us/magazine/cc138019.aspx> <http://technet.microsoft.com/en-us/magazine/cc160882.aspx> <http://msdn.microsoft.com/en-us/library/aa382503.aspx> Quote
Guest ashapadmanabhan Posted October 13, 2008 Posted October 13, 2008 Thank you for your message, In our customer environment, most of the users are administrators for some purpose. So we want to particularly restrict this registry hive. Regards, Asha -- ashapadmanabhan Quote
Guest Jimmy Brush Posted October 13, 2008 Posted October 13, 2008 Hello, icacls does not work on registry keys. However, regini.exe does and is included with Vista, but it is not as powerful or easy to use. http://support.microsoft.com/kb/264584 - JB "ashapadmanabhan" <guest@unknown-email.com> wrote in message news:cb542fab7b6bc9291f345b765ba3e8e6@nntp-gateway.com...<span style="color:blue"> > > Hi > > Please tell me whether Icacls can be used for Registry permission > change in Windows Vista. > I want to restrict users from accessing specific registry hive. In XP, > I was using Subinacl.exe. The switch specified in sbuinacl is not > available with Icacls. > > Please let me know, whether Icacls can be used for registry > restrictions or any other tool available for doing that in Windows > Vista. > > Thanks in Advance, > Regards, > Asha > > > -- > ashapadmanabhan </span> Quote
Guest ashapadmanabhan Posted October 14, 2008 Posted October 14, 2008 Jimmy Brush;732443 Wrote: <span style="color:blue"> > Hello, > > icacls does not work on registry keys. > > However, regini.exe does and is included with Vista, but it is not as > powerful or easy to use. > > 'How to change registry values or permissions from a command line or a > script' (http://support.microsoft.com/kb/264584) > > - JB > > > "ashapadmanabhan" guest@unknown-email.com wrote in message > news:cb542fab7b6bc9291f345b765ba3e8e6@nntp-gateway.com...- > > Hi > > Please tell me whether Icacls can be used for Registry permission > change in Windows Vista. > I want to restrict users from accessing specific registry hive. In > XP, > I was using Subinacl.exe. The switch specified in sbuinacl is not > available with Icacls. > > Please let me know, whether Icacls can be used for registry > restrictions or any other tool available for doing that in Windows > Vista. > > Thanks in Advance, > Regards, > Asha > > > -- > ashapadmanabhan -</span> Hi Thank you for your reply. To deny a specific registry hive for users is not able to do with regini.exe. If you have the command please let me know. Thanks in Advance, Regards, Asha -- ashapadmanabhan Quote
Guest Steve Riley [MSFT] Posted October 30, 2008 Posted October 30, 2008 I asked you some questions in the other nearly identical post you made, please check that. But I also need to tell you something here. Your intention of stopping local administrators from accessing something is misguided. If a user logs on as a local administrator, then he/she can completely undo whatever restrictions you put in place. Why do your users need to be local admins? What is the "some purpose"? -- Steve Riley steve.riley@microsoft.com http://blogs.technet.com/steriley Protect Your Windows Network: http://www.amazon.com/dp/0321336437 "ashapadmanabhan" <guest@unknown-email.com> wrote in message news:c3ab46e1eef1a7c22750b686b4c56ea9@nntp-gateway.com...<span style="color:blue"> > > Thank you for your message, > > In our customer environment, most of the users are administrators for > some purpose. > So we want to particularly restrict this registry hive. > > Regards, > Asha > > > -- > ashapadmanabhan </span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.