BorlandTalk.com Forum Index BorlandTalk.com
Borland discussion newsgroups
 
Archives   FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Too much protection?

 
Post new topic   Reply to topic    BorlandTalk.com Forum Index -> Delphi (General)
View previous topic :: View next topic  
Author Message
Ronald van der Pas
Guest





PostPosted: Thu Jan 05, 2006 12:39 am    Post subject: Too much protection? Reply with quote



Hi,

Some administrators prevent users to write to the key:
HKEY_LOCAL_MACHINE\Software in the registry.
I sometimes have discussions with administrators that my application must be
able to acces this key.
Is it unreasonable to demand acces to this key? Or do you think it is a good
security procedure to prevent this?

Greetings,
Ronald van der Pas
The Netherlands
Back to top
NickT
Guest





PostPosted: Thu Jan 05, 2006 4:34 am    Post subject: Re: Too much protection? Reply with quote



I know that in my company (90,000+ users) we do not ever let end users get
access to this key. No telling what they will do to the machine. There is
always someone who knows a little bit about nothing and goes in there poking
around deleting this and that and changing things. It can become a real
mess very quickly.
Bottom line is it depends on your company policy. Do you have a Information
Security guy? They should be able to guide you.

You set ACL's within the registry, that might be a solutions. Just get
access to the keys you need.

Regards,

Nick

"Ronald van der Pas" <ronaldvdpasNOTME (AT) caiway (DOT) nl> wrote in message
news:43bc2468$0$99081$58c7af7e (AT) news (DOT) kabelfoon.nl...
Quote:
Hi,

Some administrators prevent users to write to the key:
HKEY_LOCAL_MACHINE\Software in the registry.
I sometimes have discussions with administrators that my application must
be able to acces this key.
Is it unreasonable to demand acces to this key? Or do you think it is a
good security procedure to prevent this?

Greetings,
Ronald van der Pas
The Netherlands
Back to top
Riki Wiki Google
Guest





PostPosted: Fri Jan 13, 2006 7:12 am    Post subject: Re: Too much protection? Reply with quote



Hoi Ronald

Try to repost your question in b.p.d.non-technical if you want some
additional replies. When you repost use the Borland news server to make
everybody see your message.

Take a look here:
<http://tinyurl.com/8m5nw>
which links to
<http://delphi.wikicities.com/wiki/Delphi_Newsgroups>
Back to top
Stephen
Guest





PostPosted: Mon Jan 16, 2006 8:14 am    Post subject: Re: Too much protection? Reply with quote

I've been in the situation where I had only read only access to ALL registry
entries, even the current user.

I had to spend weeks changing the code that had been out and about in the
market for years to fix this for that one company, because their policy was
to not permit ANY sort of write access to the registry.

I can see his point, because there are many MANY people who are click happy
and end up infecting their machines something fierce.

Code around the fact that your software may only have R/O access. If it
does, dump it to an INI file.

"Ronald van der Pas" <ronaldvdpasNOTME (AT) caiway (DOT) nl> wrote in message
news:43bc2468$0$99081$58c7af7e (AT) news (DOT) kabelfoon.nl...
Quote:
Hi,

Some administrators prevent users to write to the key:
HKEY_LOCAL_MACHINE\Software in the registry.
I sometimes have discussions with administrators that my application must
be able to acces this key.
Is it unreasonable to demand acces to this key? Or do you think it is a
good security procedure to prevent this?

Greetings,
Ronald van der Pas
The Netherlands
Back to top
Display posts from previous:   
Post new topic   Reply to topic    BorlandTalk.com Forum Index -> Delphi (General) All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2006 phpBB Group
SEO toolkit © 2004-2006 webmedic.