Script to add permission to registry subkey

[John Sy]

I need to add Set Value and Create Subkey permissions for
the group Users on the registry key:
HKEY_Local_Machine\Software\Microsoft\WindowsNT\CurrentVers
ion\IniFileMappings\Control.ini

on all computers in my domain.

I plan to put the script as a startup script in Group
Policy.

Any help would be greatly appreciated. Thanks!

[Torgeir Bakken (MVP)]

John Sy wrote:

> I need to add Set Value and Create Subkey permissions for
> the group Users on the registry key:
> HKEY_Local_Machine\Software\Microsoft\WindowsNT\CurrentVers
> ion\IniFileMappings\Control.ini
>
> on all computers in my domain.
>
> I plan to put the script as a startup script in Group
> Policy.

Hi

Regini.exe or SetACL.exe is an option:

http://groups.google.com/groups?selm=400CA361.8E02C9C2%40hydro.com

SubInACL.exe can also be used for this, a new, bug-fixed version of
SubInACL.exe is available for download here (Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

If you need to access files over the network from the computer
startup script, you could put the file(s) on a network share and
grant read access for the AD group "Domain Computers" to the share.

Alternatively, you could map a drive on the fly, like this:

sDomainUser = "arp.corp\computer_fix"
sPswd = "something"

Set oNetwork = CreateObject("Wscript.Network")

oNetwork.MapNetworkDrive _
"Y:", "\\server\netlogon\some folder",, sDomainUser, sPswd

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter