Command line tool for Restricting Registry hive in windows Vista?

Posted: 10-13-2008, 09:37 AM

Hi,

Please tell me whether any command line tool available for restricting
users from accessing registry hive in windows Vista.

Before I was using Subinacl.exe for windows XP. The following registry
hive is specified with subinacl to restrict registry from users.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon" /revoke="USERS" .

The same registry hive I want to restrict in Windows Vista.
I have used Icacls for folder restrictions.
Please let me know is there any tool available for registry
restrictions through command line.

Thanks in Advance,
Regards,
Asha.




--
ashapadmanabhan

Command line tool for Restricting Registry hive in windows Vista?


Responses to "Command line tool for Restricting Registry hive in windows Vista?"

Steve Riley [MSFT]
Guest
Posts: n/a
 
Re: Command line tool for Restricting Registry hive in windows Vista?
Posted: 10-30-2008, 09:27 PM
There is really no need to do this on Windows Vista. From the root of HKM,
only SYSTEM and local administrators have full access; everyone else has
read-only access. Removing read-only access will put the system in an
unsupported state -- meaning we haven't tested this configuration, and can't
predict how the computer will behave.

Also, you say that you've used lcacls for folder restriction. What changes
have you made? Again, there is no reason to change the default ACLs; doing
so will create the same potential problems for you.

--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
Protect Your Windows Network: http://www.amazon.com/dp/0321336437



"ashapadmanabhan" <ashapadmanabhan.3390184@vistabanter.com> wrote in message
news:ashapadmanabhan.3390184@vistabanter.com...
>
> Hi,
>
> Please tell me whether any command line tool available for restricting
> users from accessing registry hive in windows Vista.
>
> Before I was using Subinacl.exe for windows XP. The following registry
> hive is specified with subinacl to restrict registry from users.
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
> NT\CurrentVersion\Winlogon" /revoke="USERS" .
>
> The same registry hive I want to restrict in Windows Vista.
> I have used Icacls for folder restrictions.
> Please let me know is there any tool available for registry
> restrictions through command line.
>
> Thanks in Advance,
> Regards,
> Asha.
>
>
>
>
> --
> ashapadmanabhan
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
BitLocker Command Line Tool? MMarable Windows Vista Security 4 06-12-2008 11:51 AM
Publish printer objects to AD by command line tool? Greven Windows XP Printers / Scanners / Fax 0 10-25-2004 11:29 AM
Command-line registry edits Kevin L. Stringer Windows XP Configuration & Management 1 06-17-2004 06:14 PM
Command Line tool to modify device resource settings Brad Combs Windows XP Embedded 4 02-05-2004 08:43 PM
I command line or small tool which can compress/shrink *.JPG picture files Paul Barasoa Windows XP Help & Support 0 09-24-2003 09:33 PM