Admin Rights issue

[Bongard]

I am an administrator of a small network and I have a question about
how to allow users certain rights. I have a few users on our network
that I need to allow to use regedit and msconfig for installing and
managing different processes on their workstations. I logged onto
their computer with my admin rights and went to C:\WINDOWS
\system32\regedt32.exe and then added their user name and allowed
security rights for full control, modify, read &execute, read, and
write. Still when these users log on they do not have access to
editing registry values via regedit(in the run menu) or the
executeable . Also - I don't know where to look to allow a user to be
able to run msconfig on their system. Any help you can offer would be
much appreciated!

Thanks,
Brian

 

[Mark L. Ferguson]

You can't do it. Running regedit is the same as being an admin. There is very
little an admin can do that the use of regedit could not also do.

--
Was this post helpful to you? Then click the "Yes" button, below.
Voting helps others who use the web interface.
Mark L. Ferguson



"Bongard" wrote:

> I am an administrator of a small network and I have a question about
> how to allow users certain rights. I have a few users on our network
> that I need to allow to use regedit and msconfig for installing and
> managing different processes on their workstations. I logged onto
> their computer with my admin rights and went to C:\WINDOWS
> \system32\regedt32.exe and then added their user name and allowed
> security rights for full control, modify, read &execute, read, and
> write. Still when these users log on they do not have access to
> editing registry values via regedit(in the run menu) or the
> executeable . Also - I don't know where to look to allow a user to be
> able to run msconfig on their system. Any help you can offer would be
> much appreciated!
>
> Thanks,
> Brian
>
>

 

[John Wunderlich]

Bongard <b.bomgren@gmail.com> wrote in
news:1184592787.500246.107170@n60g2000hse.googlegroups.com:

> I am an administrator of a small network and I have a question about
> how to allow users certain rights. I have a few users on our network
> that I need to allow to use regedit and msconfig for installing and
> managing different processes on their workstations. I logged onto
> their computer with my admin rights and went to C:\WINDOWS
> \system32\regedt32.exe and then added their user name and allowed
> security rights for full control, modify, read &execute, read, and
> write. Still when these users log on they do not have access to
> editing registry values via regedit(in the run menu) or the
> executeable . Also - I don't know where to look to allow a user to be
> able to run msconfig on their system. Any help you can offer would be
> much appreciated!

You don't say what happens when you try to use regedit, but perhaps
this can help:

http://www.dougknox.com/security/scripts_desc/regtools.htm

-- John

 

[Bongard]

Thanks John I may give this a try tomorrow. When the user tries to
select regedit from their machine they get the message "Registry
editing has been disabled by your administrator" Does that help at
all, or is that pretty much the default message?

Thanks for your help!
Brian

 

[John Wunderlich]

Bongard <b.bomgren@gmail.com> wrote in news:1184641641.756506.227570
@q75g2000hsh.googlegroups.com:

> Thanks John I may give this a try tomorrow. When the user tries to
> select regedit from their machine they get the message "Registry
> editing has been disabled by your administrator" Does that help at
> all, or is that pretty much the default message?
>
> Thanks for your help!
> Brian
>

The fix I posted should solve this problem.
-- John