Changing Registry Security Permissions

[pcsanady]

We are trying to create a "locked down" configuration for our laptops running NT Workstation 4.0 w/Service Pack 6a. One of our objectives is to allow only Domain Admins and Domain Users to log on to the laptop; no local accounts would be used. We have figured out how to use XCACLS to modify the file/folder permissions. However, there doesn't seem to be an automated tool or method to modify the registry security permissions except for local SAM accounts.

We would like to roll out several thousand laptops so doing each manually is not really an option...any suggestions would be greatly appreciated!

[Sparky]

If all laptops have the same hardware;
why not manually configure one laptop,
take an image of it using something like Power Quests Drive Image and then simply loading that image on all the other laptops.

Just an idea.

[JohnD76]

You can use Regini, unfortunately, this does not provide a /s switch. You will need to dynamically query the registry using something like Reg Query to a text file, then use Findstr to extract the keys ([]) from this text file to another. I then use change to replace the last ] with the permissions......

Hope this helps,


John.

[billbrummett]

login as local adm with net cable attached. go to local users, rights, logon locally. select domain adms and domain users....remove all except that...