SYSTEM Denied Access to Update Registry
Hi all, We recently discovered that some Registry Updates through GPO did not take effect. Upon checking, we discovered that the SYSTEM account does not have full control in some of the keys!! For example, we have a GPO perference setting to rename the 'Computer' Icon, which modifies this reg key: HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\LocalizedString However, the setting fails to apply because the SYSTEM user does not have full control: Rather, it is the TrustedInstaller user/group that has FULL CONTROL over this key. Is there any reason for this?? How can we work around it? Thanks Ahead.
February 16th, 2012 6:20pm

This is because there are certain areas of the registry and file system that Microsoft don't want you to change as it can have a deterimental effect on the OS. To do what you want you need to add the following registry value to the users CLSID HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\Default = "<what ever you want>" This may require a logoff/logon to actually take effect. Regards qSilverx
Free Windows Admin Tool Kit Click here and download it now
February 17th, 2012 8:03am

Thanks qsilverx. It worked like a charm. I'm still kinda surprised that SYSTEM doesn't have access to everything.
February 17th, 2012 12:15pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics