SYSTEM Denied Access to Update Registry
Hi all,
We recently discovered that some Registry Updates through GPO did not take effect. Upon checking, we discovered that the SYSTEM account does not have full control in some of the keys!!
For example, we have a GPO perference setting to rename the 'Computer' Icon, which modifies this reg key:
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\LocalizedString
However, the setting fails to apply because the SYSTEM user does not have full control:
Rather, it is the TrustedInstaller user/group that has FULL CONTROL over this key.
Is there any reason for this?? How can we work around it?
Thanks Ahead.
February 16th, 2012 6:20pm
This is because there are certain areas of the registry and file system that Microsoft don't want you to change as it can have a deterimental effect on the OS. To do what you want you need to add the following registry value to the users CLSID
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Default = "<what ever you want>"
This may require a logoff/logon to actually take effect.
Regards qSilverx
Free Windows Admin Tool Kit Click here and download it now
February 17th, 2012 8:03am
Thanks qsilverx. It worked like a charm.
I'm still kinda surprised that SYSTEM doesn't have access to everything.
February 17th, 2012 12:15pm