I deployed a simple logon script that should write some keys under HKEY_CURRENT_USER\Software\Policies ... However, the normal users of the domain have no permission to modify that node ... how can I do ? Thanks for help and if this is the wrong forum please move the question to the correct one. Thanks.

Hi,What kind of key are you trying to write under Policies?Can't you move them up to the HKLM?Anyway, I don't think this wil work because you are trying to alter the Policies.Your users will need local admin permissions.Maybe someone else an idea, I've read something using a compiled exe that reads the SID into a variable and uses it to add the values ore something.

Hello, Thank you for your post here. Agree with GlennExpert that you will break the Group Policy User Configuration in the domain client if you grant Domain Users modify permissions on HKEY_CURRENT_USER\Software\Policies. Compared to Group Policy Preference settings, Group Policy settings contain enforced managed settings. Change policy settings is not allow on the client side. Policy settings reduce support costs by enforcing standard configurations, help prevent productivity loss, and protect an organization's assets. Most of User Configuration settings are applied to the HKEY_CURRENT_USER\Software\Policies. If you grant the Domain Users modify permission on it, experienced users will be able to change the settings from Domain GPO via registry. To achieve your goal without grant the Domain Users modify permission, you may create your own ADM file to write keys and values in HKEY_CURRENT_USER\Software\Policies because the Client Side Extension that executes the group policy administrative template will run under the SYSTEM security context. If you have any questions or concerns, please do not hesitate to let me know.