Article View: borland.public.cppbuilder.nativeapi
Article #8642Re: Getting administrator priviliges temporarily
From: Remy Lebeau (TeamB)
Date: Fri, 01 Oct 2004 17:54
Date: Fri, 01 Oct 2004 17:54
28 lines
2248 bytes
2248 bytes
"Fatih Ekinci" <fekinci42@ttnet.net.tr> wrote in message news:415d217b@newsgroups.borland.com... > In Windows 2000, by default, "Restricted Users" don't > have permission on setting a value, but "Power Users" > have. That has always been the case, and for good reason. Restricted users are locked down for security purposes. That is why they are called "restricted" users. If a restricted user needs access to something, the admin has to permit it. It would be a breach of security of a restricted user could programmably adjust its own security rights. > RESTRICTED USERS > > Query value > Enumerate Subkeys > Notify > Read Control In other words, restricted users only have read-only access to the Registry by default. Only admins should be allowed to make changes. This is good security practice. If you don't like it, then don't use HKEY_LOCAL_MACHINE to begin with, use HKEY_CURRENT_USER instead. Gambit
Technical Details
Message-ID:
<415d99de$1@newsgroups.borland.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news1.google.com!news.glorb.com!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mailReferences:
<41566608@newsgroups.borland.com> <4156a465$1@newsgroups.borland.com> <415880b8@newsgroups.borland.com> <41592480$1@newsgroups.borland.com> <4159c77b@newsgroups.borland.com> <4159c88d$1@newsgroups.borland.com> <415a81cd@newsgroups.borland.com> <415ae8b6$1@newsgroups.borland.com> <415b2446@newsgroups.borland.com> <415b2f48$1@newsgroups.borland.com> <415c754c@newsgroups.borland.com> <415c8321@newsgroups.borland.com> <415d217b@newsgroups.borland.com>Show Full Headers
Complete Article Headers
X-Google-Thread: 10cc67,f4e17b02ce5b6ff3 X-Google-Attributes: gid10cc67,public X-Google-Language: ENGLISH,ASCII-7-bit From: "Remy Lebeau \(TeamB\)" <no.spam@no.spam.com> Newsgroups: borland.public.cppbuilder.nativeapi References: <41566608@newsgroups.borland.com> <4156a465$1@newsgroups.borland.com> <415880b8@newsgroups.borland.com> <41592480$1@newsgroups.borland.com> <4159c77b@newsgroups.borland.com> <4159c88d$1@newsgroups.borland.com> <415a81cd@newsgroups.borland.com> <415ae8b6$1@newsgroups.borland.com> <415b2446@newsgroups.borland.com> <415b2f48$1@newsgroups.borland.com> <415c754c@newsgroups.borland.com> <415c8321@newsgroups.borland.com> <415d217b@newsgroups.borland.com> Subject: Re: Getting administrator priviliges temporarily Date: Fri, 1 Oct 2004 10:54:47 -0700 Lines: 30 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1409 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 NNTP-Posting-Host: 68.69.17.41 Message-ID: <415d99de$1@newsgroups.borland.com> X-Trace: newsgroups.borland.com 1096653278 68.69.17.41 (1 Oct 2004 10:54:38 -0700) Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news1.google.com!news.glorb.com!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail