Jump to content

This is a ready-only archive of the InstallSite Forum. You cannot post any new content here. / Dies ist ein Archiv des InstallSite Forums. Hier können keine neuen Beiträge veröffentlicht werden.

locking permissions

1 reply to this topic


  • Members
  • 1 posts

Posted 20 January 2003 - 23:50

We are installing a digital camera software product that creates a VidPid key under the USB key in the HKEY LOCAL MACHINE area for recoginizing one brand of digital cameras.  Our installation for one camera creates the key and fills in the info for the camera we used to test with.  When we add a new camera, since the registry is locked in our users' Windows 2000 environment, the camera serial number is added to the registry under the same VidPid, but the information is not filled in for any added cameras (e.g. the driver location).  As a result, the 2nd camera fails to install.

We've created an application to write info to the registry for each camera added, but we need some way to unlock everything that appears under this VidPid # so we can use this fix.  

Any way to do this?

Here's how our registry looks.

 Root Hub
   VidPid# (this key needs to be left open
       Camera A info
       Camera B info
       Camera C ... etc


  • Members
  • 206 posts

Posted 22 January 2003 - 18:35

as part of our 'security hardening' of the OS for c2 certification we had to lock/unlock areas of the registry.

we ended up using the ModACL programme to perform the task and found it worked quite well.

the following command removes the everyone group from the hklm key indicated,
modacl /reg /s "hklm\system\currentcontrolset\Hardware Profiles" /de everyone

and it can just as easily be used to add rights...
modacl /reg    "hklm\software\microsoft\windows nt\currentversion"  /re users:read /v

this was during the nt days and there is probably a new method available today, but this still works for single-purpose use in the 2K/XP environment....