Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: Change permission on NTUSER.DAT

499 views
Skip to first unread message

Jerold Schulman

unread,
Feb 6, 2006, 4:00:20 AM2/6/06
to
On Mon, 6 Feb 2006 00:28:27 -0800, "MIIS Query" <MIIS...@discussions.microsoft.com> wrote:

>Hi All
>
>Thanks in advance, Do some one have a approach of chaning the permission on
> NTUSER.DAT registery hive of roaming profile. Quick reply is highly
>appreciated.
>eg \\servername\share\UserHome\profile\ntuser.dat
>
>
>Regards
>Venkey


See tip 9520 » After insuring that Administrators have Full Control of newly redirected user folders, how do I 'fix' existing redirected folders?
and link in the 'Tips & Tricks' at http://www.jsifaq.com

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

MIIS Query

unread,
Feb 6, 2006, 7:48:28 AM2/6/06
to
Hi Jerold

Thanks for your reply, Accroding to tip 9520, it only replaces the file and
folder ACL information, I am looking for some thing similary to this, which
will replace the NTUSER.DAT registry HIVE ACL information.

regards
Venkey

Jerold Schulman

unread,
Feb 6, 2006, 9:55:40 AM2/6/06
to

The Use r' s NTUSER.DAT load the HKCU (HKU\<SID>) hive.
To do it while the user is logged on, use SUBINACL, tip 8530 in the 'Tips & Tricks' at http://www.jsifaq.com

See tip 3970 » ModifyProfile freeware loads/modifies hive of user who is not logged on.

MIIS Query

unread,
Feb 6, 2006, 4:34:46 PM2/6/06
to
Hi Jerold.

Thanks for your reply again. ModifyProfile.exe is only giving the option of
adding/modifiing the registry value. I am looking for some thing to change
the security permission. for example
NTUSER.DAT is having the registery HIVE Permission Full Control for Domain
Admins and NT user ID

I need to add the registery HIVE permission FULL Control for new user ID
which will be a W2K3 User ID.
Hope this clarifies my requirement.

Regards
venkey

Jerold Schulman

unread,
Jun 6, 2006, 8:57:04 AM6/6/06
to

Use REG.EXE, built into Windows XP, Windows Server 2003, and later operating systems, or installed from the Windows 2000 Support Tools,
and SubInAcl.exe from tip 8530 » Corrected version of SubInAcl in the 'Tips & Tricks' at http://www.jsifaq.com

REG LOAD HKU\TEMPUSER "C:\Documents and Settings\UserName\ntuser.dat"

subinacl /noverbose /nostatistic /keyreg (or subkeyreg) .........

REG UNLOAD HKU\TEMPUSER

0 new messages