HKCU permissions change via GPO?
Hello Folks What I need to do is change the permissions on all system's HKCU (or all user hives if possible!). Specifically I need to change HKCU\Software\Policies\ permissions to allow current user the right to create/edit sub keys/values I am currently trying to use SCCM to push out a registry fix for Excel 2003 (The reg file contains the following, and I have created an SCCM package that TRIED to apply the registry fix, but it appears that there is a permissions issue - confirmed by manually trying to apply the reg file at the local machine with the logged on user account: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security\FileValidation] EnableOnLoad=dword: Any help would be appreciated! Kindest Regards, Norm Bernard, Systems Administrator / Administrateur Système tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | norm.bern...@nrc-cnrc.gc.ca NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: HKCU permissions change via GPO?
We are trying hard to get away from GPO's as the previous AD guy had over 350 separate GPO's :( I've been trying to clean them up for months now. Kindest Regards, Norm Bernard, Systems Administrator / Administrateur Système tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | norm.bern...@nrc-cnrc.gc.ca NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Thursday, September 08, 2011 11:12 AM To: NT System Admin Issues Subject: RE: HKCU permissions change via GPO? You'd be better off using the Excel ADM file in the GPO to make that change directly. :) Good rule of thumb is if it's under Software\Policies, it's configurable via a GPO with an ADM file. :) DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE From: Bernard, Norm [mailto:norm.bern...@nrc-cnrc.gc.ca]mailto:[mailto:norm.bern...@nrc-cnrc.gc.ca] Sent: Thursday, September 08, 2011 2:10 PM To: NT System Admin Issues Subject: HKCU permissions change via GPO? Hello Folks What I need to do is change the permissions on all system's HKCU (or all user hives if possible!). Specifically I need to change HKCU\Software\Policies\ permissions to allow current user the right to create/edit sub keys/values I am currently trying to use SCCM to push out a registry fix for Excel 2003 (The reg file contains the following, and I have created an SCCM package that TRIED to apply the registry fix, but it appears that there is a permissions issue - confirmed by manually trying to apply the reg file at the local machine with the logged on user account: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security\FileValidation] EnableOnLoad=dword: Any help would be appreciated! Kindest Regards, Norm Bernard, Systems Administrator / Administrateur Système tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | norm.bern...@nrc-cnrc.gc.camailto:norm.bern...@nrc-cnrc.gc.ca NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
OT: Can anyone remember...
Sorry for going this far OT, but it's driving a colleague and I insane trying to remember what this commercial was for. Does anyone out there remember a TV Commercial that featured a child on a bus being teased by all his friends with chants of twelve o'clock, twelve o'clock, twelve o'clock And also included a super-geek dad saying Anyone for more RAM? while holding a fan of memory sticks up to a group of kids playing video games. We both remember parts of this commercial vividly, but are absolutely lost trying to remember what is was supposed to be advertising in the first place. Sorry if my description of the commercial sucks, I've been having brain farts all day! Kindest Regards, Norm Bernard, Network Manager / Gestionnaire de réseaux tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | norm.bern...@nrc-cnrc.gc.ca NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Update one domain from another?
Hi Guys, My 'google-fu' has failed me :-( I need a script to grab user information ( first name, last name, full name, email address, and phone) from one Windows 2003 domain (through LDAP) and update the same accounts in a local Windows 2003 active directory. The login names are identical because insert long story about confused government rules here. So we use the same login name to make life easier on the users. Any assistance is greatly appreciated! Kindest Regards, Norm Bernard, Network Manager / Gestionnaire de réseaux tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | norm.bern...@nrc-cnrc.gc.ca NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
MOSS and FBA problem.
Hello Folks Has anyone here managed to get Forms Based Authentication working with MOSS? I have followed the online guides to configure FBA with .Net 2.0 Everything LOOKS right and the VB2005 ASP.Net configuration tool runs and connects to the DB, but when I try to add roles, manage users, anything really, I get the following error: An error was encountered. Please return to the previous page and try again. The following message may help in diagnosing the problem: Attribute not recognized 'connectionStringName' (C:\Documents and Settings\XX\My Documents\Visual Studio 2005\WebSites\mossFBA\web.config line 46) at System.Web.Administration.WebAdminPage.CallWebAdminHelperMethod(Boolean isMembership, String methodName, Object[] parameters, Type[] paramTypes) at ASP.security_roles_manageallroles_aspx.BindGrid() at ASP.security_roles_manageallroles_aspx.Page_Load() at System.Web.Util.CalliHelper.ArglessFunctionCaller(IntPtr fp, Object o) at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) Any ideas? All help appreciated, Thanks! Norm Bernard, Network Manager / Gestionnaire de réseaux tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | [EMAIL PROTECTED] NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 3250 East Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
RE: MOSS and FBA problem.
I should also add, here is the section of my web.config file that is relevant. configuration appSettings/ connectionStrings add name=AspNetDbFbaConnectionString connectionString=Data Source=YVR-SQL\YVRSQL1;Initial Catalog=FBA_1;Integrated Security=True / /connectionStrings system.web !--membership provider -- membership defaultProvider=FbaMember providers add connectionStringName=AspNetDbFbaConnectionString enablePasswordRetrieval=false enablePasswordReset=true requiresQuestionAndAnswer=false applicationName=/ requiresUniqueEmail=false passwordFormat=Hashed maxInvalidPasswordAttempts=5 minRequiredPasswordLength=15 minRequiredNonalphanumericCharacters=2 passwordAttemptWindow=5 passwordStrengthRegularExpression= description=Stores and retrieves membership data from the Microsoft SQL Server database name=FbaMember type=System.Web.Security.SqlMembershipProvider,System.Web,Version=2.0.0.0,Culture=neutral,PublicKeyToken=b03f5f7f11d50a3a / /providers /membership roleManager enabled=true defaultProvider=FbaRole providers add name=FbaRole connectionStringName=AspNetDbFbaConnectionString applicationName=/ description=Stores and retrieves roles data from the local Microsoft SQL Server database type=System.Web.Security.WindowsTokenRoleProvider,System.Web,Version=2.0.0.0,Culture=neutral,PublicKeyToken=b03f5f7f11d50a3a / /providers /roleManager Norm Bernard, Network Manager / Gestionnaire de réseaux tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | [EMAIL PROTECTED] NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 3250 East Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada From: Bernard, Norm [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 22, 2008 12:25 PM To: NT System Admin Issues Subject: MOSS and FBA problem. Hello Folks Has anyone here managed to get Forms Based Authentication working with MOSS? I have followed the online guides to configure FBA with .Net 2.0 Everything LOOKS right and the VB2005 ASP.Net configuration tool runs and connects to the DB, but when I try to add roles, manage users, anything really, I get the following error: An error was encountered. Please return to the previous page and try again. The following message may help in diagnosing the problem: Attribute not recognized 'connectionStringName' (C:\Documents and Settings\XX\My Documents\Visual Studio 2005\WebSites\mossFBA\web.config line 46) at System.Web.Administration.WebAdminPage.CallWebAdminHelperMethod(Boolean isMembership, String methodName, Object[] parameters, Type[] paramTypes) at ASP.security_roles_manageallroles_aspx.BindGrid() at ASP.security_roles_manageallroles_aspx.Page_Load() at System.Web.Util.CalliHelper.ArglessFunctionCaller(IntPtr fp, Object o) at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) Any ideas? All help appreciated, Thanks! Norm Bernard, Network Manager / Gestionnaire de réseaux tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | [EMAIL PROTECTED] NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 3250 East Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Upgrade to Next Generation Antispam/Antivirus with Ninja!~ ~ http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm ~
