locked
Logon Script in Windows 7 RRS feed

  • Question

  • I hvae question regarding Power Users access right in Windows 7 running on Windows 2003 Domain environment.

    I have logon script which has some regsitry change and it is ok for local administrator right. But it is "Access Denied" for Power user.

    Any ides on this?

     

    Monday, May 9, 2011 3:26 AM

Answers

All replies

  • depends on what registry setting it is; are you able to tell us what the specific key is?

    HKCU will be mostly blocked, even for power users.


    And to preempt "how do I set a registry setting under KHCU then", the answer is Group Policy Preferences.
    Monday, May 9, 2011 3:53 AM
  • So what advice will you give if the registry is HKCU related for Windows 7 Power Users as its permission has been removed for Power User in Windows 7.

     

    Monday, May 9, 2011 4:08 AM
  • use group policy preferences to set the value you need. 

    which specific key is it?

    Monday, May 9, 2011 4:50 AM
  • Hi,

    As SJB99 said, you can use GP Preferences registry instead. By default, Group Policy processes computer/user preferences using the security context of the SYSTEM account.

    image

    Registry Extension
    http://technet.microsoft.com/en-us/library/cc771589.aspx

    Brent
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Monday, May 9, 2011 6:34 AM
  • How about for copying file which the Power users in XP can have right to do it in Logon Script.

    Now the Windows 7 power user don't have the access right in doing so in the Logon script.

    Any advice?

    Monday, May 9, 2011 2:10 PM
  • again, Group Policy preferences

    In this case, the Files selection

    Are you seeing a pattern yet?   :-)

    Monday, May 9, 2011 11:54 PM
  • Can the logon script in Group Policy in the 2003 Windows server "run with highest prviileges" so that the Power User can run registry change just like the schedular task run with highest privileges?

    And I cannot see the pattern in File selection in Group Policy preference.  Please advise.

    Thanks,

     

    Tuesday, May 10, 2011 1:52 AM
  • Hi,

    If you use logon script, you have to elevate permission for power user.

    Utility Spotlight Script Elevation PowerToys for Windows Vista.
    http://technet.microsoft.com/en-us/library/2007.06.utilityspotlight.aspx

    To use GP Preferences in Windows 2003 domain, you have to first install RSAT on Windows 7, then manage group policy from Windows 7.

    Installing Remote Server Administration Tools (RSAT) for Windows 7
    http://www.petri.co.il/remote-server-administration-tools-for-windows-7.htm

    Installing and Managing Group Policy Preferences on a Windows Server 2003 Domain
    http://blogs.technet.com/b/danstolts/archive/2009/01/21/installing-and-managing-group-policy-preferences-on-a-windows-server-2003-domain.aspx

    Brent
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    • Marked as answer by Brent Hu Wednesday, May 18, 2011 7:48 AM
    Friday, May 13, 2011 3:11 AM
  • So you mean to use Group Policy Preference can copy file to C:\Program files and C:\Windows folder in Windows 7 which the Power user don't have any access right on it.

    And do you have any detail proceture for apply Group Policy Preference?

    Friday, May 13, 2011 1:47 PM
  • Hi,

    Yes, by default, a file/folder preference item has access to all objects with the SYSTEM ACE.

    Configure a Files/Folders Item
    http://technet.microsoft.com/en-us/library/cc772536.aspx
    http://technet.microsoft.com/en-us/library/cc730913.aspx

    Brent

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    • Marked as answer by Brent Hu Wednesday, May 18, 2011 7:48 AM
    Monday, May 16, 2011 6:26 AM
  • I'm using a  "Power User local to the system" in windows 7 machine, with which writing / creating keys in  registry HKCU\Softwares\Microsoft\Windows\CurrentVersion\policies\system\ are failing. How do i use GP edit in this case.

    Admin is able to write / create keys in registry "HKCU\Softwares\Microsoft\Windows\CurrentVersion\policies\system\"

    Tuesday, January 3, 2012 7:39 AM
  • > HKCU\Softwares\Microsoft\Windows\CurrentVersion\policies\system\ are
    > failing. How do i use GP edit in this case.
     
    The "policies" subkey is protected, normal users cannot make changes
    there. Otherwise they would be able to get rid of policy settings...
     
    What are you trying to achieve?
     
    > Admin is able to write / create keys in registry
    > "HKCU\Softwares\Microsoft\Windows\CurrentVersion\policies\system\"
     
    Yes, that's the miracle within administrators - they are, what they are (:
     
    sincerely, Martin
     

    A bissle "Experience", a bissle GMV... Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Saturday, January 7, 2012 5:46 PM