[K12OSN] desktop.ini

[Rusty Pywtorak]

Yes, but the problem you will run into is that the user does not have
permission to change the policy sections of the registry because
otherwise policies would be ineffective -- the user could just go into
the registry themselves and change it to get around it. Thus even though
we are talking about HKeyCurrentUser, which belongs to the user, the
permissions on the policy sections of the registry are locked down to
prevent the user from making changes.

Trying to change that setting via a script will fail because the script
runs in the security context of the user -- and the user doesn't have
permission to change it (unless they happen to be a member of the local
admins group). To verify this open up the registry editor and try to
change that registry key manually.

What you need is to be able to run your script in the security context
of another user. I suppose there are some third party tools to do that
-- never gone searching for it, however.

The way it is designed to work is that policy settings are controlled
through group policy -- which unfortunately locks you into Microsoft
because group policy requires active directory. Personally, in the same
way that Samba separates file sharing from Windows, I'd like to see
something similar for group policy. 

I know the open source community can 'out-microsoft' microsoft. Are
there any open source alternatives to group policy??

Rusty Pywtorak

-----Original Message-----
From: k12osn-bounces at redhat.com [mailto:k12osn-bounces at redhat.com] On
Behalf Of Kevin Verheyen
Sent: Friday, August 12, 2005 12:11 PM
To: Support list for opensource software in schools.
Subject: Re: [K12OSN] desktop.ini

And this looks like the user key to modify

HKEY_CURRENT_USER\Software\Microsoft\
Windows\
CurrentVersion\Policies\Explorer\
NoInstrumentation
REG_DWORD = (1)