🚀 go-pugleaf

Hmmm,

Thanks for the reply

Is there no way to grant and then remove the right? I have done this before
using adjusttokenprivielege?

Brian

"Remy Lebeau (TeamB)" <gambit47.no.spam@no.spam.yahoo.com> wrote in message
news:40de0478$1@newsgroups.borland.com...
>
> "Brian Lonnon" <lonnon@screaming.net> wrote in message
> news:40dde673$1@newsgroups.borland.com...
>
> > How can I allow ordinary users to write to keys in HKEY_LOCAL_MACHINE?
>
> You probably can't, they wouldn't have the necessary access rights
> available, unless you use REGEDT32.EXE to adjust the access rights on the
> individual keys themselves.
>
> > I want my program to set NukeOnDelete
> >
>
in(HKEY_LOCAL_MACHINE\Software\Microsoft\windows\currentversion\explorer\bit
> > bucket) to 1 at startup and reset it to 0 on exit.
>
> The only ways for a non-admin to do that is if the key's security rights
are
> changed via REGEDT32.EXE.  Otherwise, you need admin rights.  For a
> non-admin to gain admin rights without reconfiguring the system, you would
> have to make a separate service which itself runs under the SYSTEM (and
thus
> an admin) account.  Then the program running under the non-admin user
could
> communicate with the service running under an admin account, and have the
> service behave on the program's behalf.
>
> > Logged on as Administrator, there is no problem. Logged
> > on as a user without admin rights, any attempt to write to
> > the key fails.
>
> As well it should.  Non-admin users don't have writing privileges to HKLM
by
> default.
>
>
> Gambit
>
>