Registry permissions problem



Marco Polo
07-09-2005, 10:53 PM
Hi, I'm logged in as administrator on our PDC (SBS 2000), trying to get a
particular application to install (in this case, Veritas' Intelligent
Disaster Recovery). It moans that it isn't allowed to access particular
registry keys and can't install.

I don't appear to have access rights to HKEY_LOCAL_MACHINE at all - and
trying to grant the Administrator account full access using Regedit32
(Security > Permissions) results in

"Unable to save permission changes on HKEY_LOCAL_MACHINE".
Access is denied.

I've added the Administrators group to 'Act as part of the operating system'
(MYDOMAIN\Administrator was already there but I've added Administrators too
to be sure)
I've done the same with 'act as a service'. both of the above suggestions
were from the veritas support pages.

Any ideas what else I can do? The Veritas website isn't much help so I
assume it's a permissions problem somewhere.

Cheers

Andy

Steven L Umbach
07-09-2005, 10:53 PM
Run the command " net localgroup administrators " to verify that domain
admins and administrator account are shown as members and then use the
command " net user username " using your account name instead of username to
verify that the account you are logged on with is indeed a member of the
administrators or domain admins group.

After verifying such check the ownership of the HKLM key to make sure it is
"administrators" which should be the default or then change it to
administrators and be sure to select the option to replace owner on all
subcontainers and objects. Then you should be able to modify registry
permissions and make sure that administrators and system have full control
and read permissions. I STRONGLY recommend that you make a full backup which
ideally would be a Ghost type image before making changes to the registry. I
believe that some "protection" [antivirus, antispyware,etc] type packages
may try to manage registry permissions if you have such installed. You might
want to try booting into safe mode and try also. --- Steve


"Marco Polo" <rallybob@hotmail.co.uk> wrote in message
news:OD%23ahDBbFHA.1600@tk2msftngp13.phx.gbl...
> Hi, I'm logged in as administrator on our PDC (SBS 2000), trying to get a
> particular application to install (in this case, Veritas' Intelligent
> Disaster Recovery). It moans that it isn't allowed to access particular
> registry keys and can't install.
>
> I don't appear to have access rights to HKEY_LOCAL_MACHINE at all - and
> trying to grant the Administrator account full access using Regedit32
> (Security > Permissions) results in
>
> "Unable to save permission changes on HKEY_LOCAL_MACHINE".
> Access is denied.
>
> I've added the Administrators group to 'Act as part of the operating
> system'
> (MYDOMAIN\Administrator was already there but I've added Administrators
> too
> to be sure)
> I've done the same with 'act as a service'. both of the above suggestions
> were from the veritas support pages.
>
> Any ideas what else I can do? The Veritas website isn't much help so I
> assume it's a permissions problem somewhere.
>
> Cheers
>
> Andy
>
>

Marco Polo
07-09-2005, 10:53 PM
Hi Steven

Thanks for the reply.

> Run the command " net localgroup administrators " to verify that domain
> admins and administrator account are shown as members and then use the
> command " net user username " using your account name instead of username
to
> verify that the account you are logged on with is indeed a member of the
> administrators or domain admins group.

yes it is.

> After verifying such check the ownership of the HKLM key to make sure it
is
> "administrators" which should be the default or then change it to

Using RegEdit32, when I attempt to change the permissions for HKLM I get

"You do not have permission to view the current permission settings for
HKEY_LOCAL_MACHINE, but you can make permission changes."

So on attempting to add my account, or in fact any account, I get

"Unable to save permission changes on HKEY_LOCAL_MACHINE.
Access is denied."

> administrators and be sure to select the option to replace owner on all
> subcontainers and objects. Then you should be able to modify registry
> permissions and make sure that administrators and system have full control
> and read permissions. I STRONGLY recommend that you make a full backup
which
> ideally would be a Ghost type image before making changes to the registry.
I
> believe that some "protection" [antivirus, antispyware,etc] type packages
> may try to manage registry permissions if you have such installed. You
might
> want to try booting into safe mode and try also. --- Steve

Actually good point, that didn't occur to me!... We have eTrust antivirus
running here and it could be that. Won't realistically be able to reboot the
thing till the weekend now but I'll look into that on the web.

Thanks for the help.

Andy


Registry permissions problem