BorlandTalk.com

Ronald van der Pas · Guest

Hi,

Some administrators prevent users to write to the key:
HKEY_LOCAL_MACHINESoftware in the registry.
I sometimes have discussions with administrators that my application must be
able to acces this key.
Is it unreasonable to demand acces to this key? Or do you think it is a good
security procedure to prevent this?

Greetings,
Ronald van der Pas
The Netherlands

NickT · Guest

I know that in my company (90,000+ users) we do not ever let end users get
access to this key. No telling what they will do to the machine. There is
always someone who knows a little bit about nothing and goes in there poking
around deleting this and that and changing things. It can become a real
mess very quickly.
Bottom line is it depends on your company policy. Do you have a Information
Security guy? They should be able to guide you.

You set ACL's within the registry, that might be a solutions. Just get
access to the keys you need.

Regards,

Nick

"Ronald van der Pas" <ronaldvdpasNOTME (AT) caiway (DOT) nl> wrote

Riki Wiki Google · Guest

Hoi Ronald

Try to repost your question in b.p.d.non-technical if you want some
additional replies. When you repost use the Borland news server to make
everybody see your message.

Take a look here:
<http://tinyurl.com/8m5nw>
which links to
<http://delphi.wikicities.com/wiki/Delphi_Newsgroups>

Stephen · Guest

I've been in the situation where I had only read only access to ALL registry
entries, even the current user.

I had to spend weeks changing the code that had been out and about in the
market for years to fix this for that one company, because their policy was
to not permit ANY sort of write access to the registry.

I can see his point, because there are many MANY people who are click happy
and end up infecting their machines something fierce.

Code around the fact that your software may only have R/O access. If it
does, dump it to an INI file.

"Ronald van der Pas" <ronaldvdpasNOTME (AT) caiway (DOT) nl> wrote