Setting Up XP Registry Permission(s).

Musafir_86 · Rated PG Joined: 28 Apr 2005 Posts: 11

Hi again everybody,

-Here I've a question : as we know, we can set permission for each registry key in WinNT/2K/XP (whether it can be modified by User/Admin/System).

-Now, how can we make it (the specific key) can only modified (add/edit/delete) by a specific user/admin (that's me), but can't be modified by OTHER ADMINs or SYSTEM??? Also, where the info about this permission is stored (I even thought it's also stored somewhere in Registry). I've tried some methods, but the SYSTEM still also can't be prevented from modify the key(s).

-Hope anybody have any better ideas... Hammer

Thank you.

Regards,
-Musafir_86.

BeerCheeze · Posted: Fri, 06 May 2005 21:22:09 Post Subject:

Is this in a domain set up?

If not... you can't do anything to lock out an admin. You can deny them access, but as an admin they can take ownership of anything and do anything they want from there.

If it's in a domain, and the account is NOT a local admin, then you can do some work. But again, if its a local admin account, nothing you can do on that machine.

Musafir_86 · Rated PG Joined: 28 Apr 2005 Posts: 11

-No, it isn't in a domain, but rather a standalone PC (not connected to LAN). I just try to figure out is there any way to stop WINDOWS XP itself from modifying certain keys that only myself should do (and can control) that.

-Musafir_86.

BeerCheeze · Posted: Fri, 06 May 2005 22:45:07 Post Subject:

What keys are you trying to control?

Musafir_86 · Rated PG Joined: 28 Apr 2005 Posts: 11

-The following branches/keys :-

(1) HKLM\SOFTWARE\Policies
(2) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
(3) HKCU\SOFTWARE\Policies
(4) HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies

-Honestly, I'm trying to overcome WinXP Starter Edition limitations the 'legal' way (that's by editing registry - no part in the EULA deny that AFAIK), so I can promote even more people into using legal copies of Windows without paying more... Currently, I don't have any copy of this OS in my hand (I just exploring one of the PCs in a shop in my hometown).

-BTW, do you have the solution?

Musafir_86.

BeerCheeze · Posted: Sat, 07 May 2005 00:20:41 Post Subject:

Well.... it's sorta shaky ground... and I work for a company owned by MS.

But... I doubt any changes could be made by anyone to the registry if the files in C:\WINDOWS\system32\config with no extensions and are named DEFAULT, SAM, SECURITY, SOFTWARE, and SYSTEM are set to read-only.

However.... I have not, nor will I try this, recommend this, nor warranty this in anyway shape or form.

Musafir_86 · Rated PG Joined: 28 Apr 2005 Posts: 11

-Setting those files to "Read-Only"? Of course nobody will recommends to do that; that will make the entire Windows nearly unusable! Laughing

-Anyway, my first attempt at cracking (read:overcoming limitations) WinXP SE have been leaked to a MS worker without my intention... Razz

-Musafir_86.