[K12OSN] desktop.ini

Kevin Verheyen thepiano at telenet.be
Fri Aug 12 21:13:06 UTC 2005


Would the command 'Runas' do the magic trick in the batch file?

example

runas Administartor:passwd GROUPPOL.bat

from out of the startup.bat file?

Kevin



Op 12-aug-05, om 21:43 heeft Rusty Pywtorak het volgende geschreven:

> Yes, but the problem you will run into is that the user does not have
> permission to change the policy sections of the registry because
> otherwise policies would be ineffective -- the user could just go into
> the registry themselves and change it to get around it. Thus even  
> though
> we are talking about HKeyCurrentUser, which belongs to the user, the
> permissions on the policy sections of the registry are locked down to
> prevent the user from making changes.
>
> Trying to change that setting via a script will fail because the  
> script
> runs in the security context of the user -- and the user doesn't have
> permission to change it (unless they happen to be a member of the  
> local
> admins group). To verify this open up the registry editor and try to
> change that registry key manually.
>
> What you need is to be able to run your script in the security context
> of another user. I suppose there are some third party tools to do that
> -- never gone searching for it, however.
>
> The way it is designed to work is that policy settings are controlled
> through group policy -- which unfortunately locks you into Microsoft
> because group policy requires active directory. Personally, in the  
> same
> way that Samba separates file sharing from Windows, I'd like to see
> something similar for group policy.
>
> I know the open source community can 'out-microsoft' microsoft. Are
> there any open source alternatives to group policy??
>
> Rusty Pywtorak
>
> -----Original Message-----
> From: k12osn-bounces at redhat.com [mailto:k12osn-bounces at redhat.com] On
> Behalf Of Kevin Verheyen
> Sent: Friday, August 12, 2005 12:11 PM
> To: Support list for opensource software in schools.
> Subject: Re: [K12OSN] desktop.ini
>
> And this looks like the user key to modify
>
> HKEY_CURRENT_USER\Software\Microsoft\
> Windows\
> CurrentVersion\Policies\Explorer\
> NoInstrumentation
> REG_DWORD = (1)
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
>
>




More information about the K12OSN mailing list