Change ower of a HKEY_CLASSES_ROOT registry key from TrustedInstaller


  • Hello,

    I am trying to create a group policy that will change the owner of a registry key in HKEY_CLASSES_ROOT from TrustedInstaller to a domain admin account. I have tried to do this but keep getting ACCESS Denied errors on the host box that is joining the domain. Is there something I am missing? I am using Windows Server 2012 and having Windows 7 boxes join the domain.

    The steps I took were as follows on the domain controller (Windows Server 2012)

    - Group Policy Management

    - Forest -> Domains -> MyDomain -> Create a GPO in this domain, and Link it here...

    - Edited the new policy, Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Registry -> New Key...

    - Inputed my key and modified the permissions and owner

    - I then added the workstation and the user group to the Security Filtering of the GPO

    - It is Enforced and Link Enabled

    Any help would be appreciated.


    Wednesday, September 09, 2015 2:45 PM