Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I know that I can use group policy preferences to set registry key values on a Windows 7 computer. But is it possible to apply registry key permissions using group policy?

Note: I've seen this post about writing scripts using SubInAcl but was trying to find a way to use a group policy without a script.

share|improve this question

1 Answer 1

up vote 6 down vote accepted

Yes; from the Group Policy Object Editor, expand Computer Configuration > Windows Settings > Security Settings. You should see a Registry option, where you can add keys and specify permissions.

Note that just allows you to play with permissions; i.e. this is different from Group Policy Preferences, where you can actually set values

share|improve this answer
    
Thanks! Any chance you know if this works also for user registry keys? –  Shannon Wagner May 17 '12 at 20:53
1  
Doesn't appear to; no 'Registry' branch under 'User Configuration'. AD is full of oversights like this. You could do it for specific users, if you know their SIDs, by adding to the USERS hive. But for all users, you're going to need a script. I would probably use a computer startup script which enumerated all the user folders, loaded their registry hives with REG.EXE and set the permissions with REGINI.EXE (or have the script create a Scheduled Task which would periodically do the same). –  jimbobmcgee May 18 '12 at 10:04

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.