Some one provided registry read access for no admin but unable to perform any task by any user(including admin) for the server

Windows Server 2008

Can any one help me.

How to fix this or role

Hello,

this is too less information. Please talk to your colleagues to find out who has changed something and especially how it was changed.

Security permissions can be altered with scripts and GPOs.

Hi Meinolf,

Thanks for you reply.

Its seems to be provided someone read only access for one of the non admin users to registry key read access.

Also we are getting error event ID 1530 Source Windows -Microsoft-User-profiles-services.

Description:

Windows detected your registry file is in use by other application or services. The file will be unloaded. The application or services that hold your registry file may not function properly afterwards.

Details:

3 User registry handles leaked from registry\user\s-xxxxxxxxxxxxxxx\process 800(\device\harddisk\volume2\windows\system32\svhost.exe) has opened

\process 1296(\device\harddisk\volume2\program files(x86)\symantech\Symantec Endpoint protection\rtvscan.exe).exe has opened

\users\s-xxxxxxxxxxxxxxxxxxxx\software\Symantec\Symantec Endpoint Protection\AV\Custom Tasks

Not sure registry modified or not because this events occurs not able to open any application. If you click any application in the desktop its showing only remove, shortcut.

Thanks

Hello,

why do you think this "Its seems to be provided someone read only access for one of the non admin users to registry key read access."? Not clear for me.

The user profile service has nothing to with an account that has someone granted registry permissions.

By default there are of course options in the registry that MUST be read by users and also where the user is able to write to the registry.

Can you please help how do we fix it 

Hello,

as stated in http://support.microsoft.com/kb/947238/en-us the warning is about an application, in your case Symantec Endpoint Protection, so check this application and also use the Symantec Forum about this.

BUT as this is NOT Directory services related please ask this in http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winservergen Or maybe a MODERATOR can move the thread to the other forum.