How do I allow aspnet user to change registry

[Abe]

Hi

I would like to know how to allow the asp.net user to
change the registry in order to run a web application
locally. At present I receive an application error when
opening the application which seems to indicate that the
aspnet user doesn't have rights to change the registry.

I could give the user admin rights, but I would rather
not. I'm not very proficient in the use of group policy
etc., but from what I understand I need to go into MMC and
add a snap-in, but as yet I've not been able to find this
type of setting in any of the available standalone snap-
ins. Where do I find such a setting and how do I add it to
this user?

Thanks

Abe

[Harini Raghavan \(MSFT\)]

You can use the tool regedit and give the asp.net user the permissions
(right clicking on the desired registry key and get to Permissions)
Or you can use RegSetKeySecurity API if you want to do it programmatically

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms
specified at http://www.microsoft.com/info/cpyright.htm


"Abe" > wrote in message
...
> Hi
>
> I would like to know how to allow the asp.net user to
> change the registry in order to run a web application
> locally. At present I receive an application error when
> opening the application which seems to indicate that the
> aspnet user doesn't have rights to change the registry.
>
> I could give the user admin rights, but I would rather
> not. I'm not very proficient in the use of group policy
> etc., but from what I understand I need to go into MMC and
> add a snap-in, but as yet I've not been able to find this
> type of setting in any of the available standalone snap-
> ins. Where do I find such a setting and how do I add it to
> this user?
>
> Thanks
>
> Abe

[Abe]

Hi Harini

Can you tell me what the 'desired registry key' might be
for allowing the asp.net user to edit the registry? Is
there really no way of doing this through group policy?

Thanks

Abe

>-----Original Message-----
>You can use the tool regedit and give the asp.net user
the permissions
>(right clicking on the desired registry key and get to
Permissions)
>Or you can use RegSetKeySecurity API if you want to do it
programmatically
>
>--
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>Any opinions or policies stated within are my own and do
not necessarily
>constitute those of my employer. Use of included script
samples are subject
>to the terms
>specified at http://www.microsoft.com/info/cpyright.htm
>
>
>"Abe" > wrote in message
...
>> Hi
>>
>> I would like to know how to allow the asp.net user to
>> change the registry in order to run a web application
>> locally. At present I receive an application error when
>> opening the application which seems to indicate that the
>> aspnet user doesn't have rights to change the registry.
>>
>> I could give the user admin rights, but I would rather
>> not. I'm not very proficient in the use of group policy
>> etc., but from what I understand I need to go into MMC
and
>> add a snap-in, but as yet I've not been able to find
this
>> type of setting in any of the available standalone snap-
>> ins. Where do I find such a setting and how do I add it
to
>> this user?
>>
>> Thanks
>>
>> Abe
>
>
>.
>

[Harini Raghavan \(MSFT\)]

I would assume this would depend on the web application you are using (you
need to find out what registry key it is trying to modify ) Otherwise you
might need to give the aspnet user permission to modify all keys such as
hkey_classes_root/hkey_users - which is probably not advisable

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms
specified at http://www.microsoft.com/info/cpyright.htm


"Abe" > wrote in message
...
> Hi Harini
>
> Can you tell me what the 'desired registry key' might be
> for allowing the asp.net user to edit the registry? Is
> there really no way of doing this through group policy?
>
> Thanks
>
> Abe
>
> >-----Original Message-----
> >You can use the tool regedit and give the asp.net user
> the permissions
> >(right clicking on the desired registry key and get to
> Permissions)
> >Or you can use RegSetKeySecurity API if you want to do it
> programmatically
> >
> >--
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >Any opinions or policies stated within are my own and do
> not necessarily
> >constitute those of my employer. Use of included script
> samples are subject
> >to the terms
> >specified at http://www.microsoft.com/info/cpyright.htm
> >
> >
> >"Abe" > wrote in message
> ...
> >> Hi
> >>
> >> I would like to know how to allow the asp.net user to
> >> change the registry in order to run a web application
> >> locally. At present I receive an application error when
> >> opening the application which seems to indicate that the
> >> aspnet user doesn't have rights to change the registry.
> >>
> >> I could give the user admin rights, but I would rather
> >> not. I'm not very proficient in the use of group policy
> >> etc., but from what I understand I need to go into MMC
> and
> >> add a snap-in, but as yet I've not been able to find
> this
> >> type of setting in any of the available standalone snap-
> >> ins. Where do I find such a setting and how do I add it
> to
> >> this user?
> >>
> >> Thanks
> >>
> >> Abe
> >
> >
> >.
> >

[Roger Abell [MVP]]

Group policy is the long route to adjusting permissions
on registry keys (or in NTFS filesystem)

Asp.Net account should not need changes in the registry.
What is the application, and what is it trying to do ?
The only reason it may need these added permissions is
due to what the application is trying to do.


"Abe" > wrote in message
...
> Hi Harini
>
> Can you tell me what the 'desired registry key' might be
> for allowing the asp.net user to edit the registry? Is
> there really no way of doing this through group policy?
>
> Thanks
>
> Abe
>
> >-----Original Message-----
> >You can use the tool regedit and give the asp.net user
> the permissions
> >(right clicking on the desired registry key and get to
> Permissions)
> >Or you can use RegSetKeySecurity API if you want to do it
> programmatically
> >
> >--
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >Any opinions or policies stated within are my own and do
> not necessarily
> >constitute those of my employer. Use of included script
> samples are subject
> >to the terms
> >specified at http://www.microsoft.com/info/cpyright.htm
> >
> >
> >"Abe" > wrote in message
> ...
> >> Hi
> >>
> >> I would like to know how to allow the asp.net user to
> >> change the registry in order to run a web application
> >> locally. At present I receive an application error when
> >> opening the application which seems to indicate that the
> >> aspnet user doesn't have rights to change the registry.
> >>
> >> I could give the user admin rights, but I would rather
> >> not. I'm not very proficient in the use of group policy
> >> etc., but from what I understand I need to go into MMC
> and
> >> add a snap-in, but as yet I've not been able to find
> this
> >> type of setting in any of the available standalone snap-
> >> ins. Where do I find such a setting and how do I add it
> to
> >> this user?
> >>
> >> Thanks
> >>
> >> Abe
> >
> >
> >.
> >

[Abe]

Roger

I really don't know the answer to the why? bit. I'm not
the developer, I'm just responsible for installing the
application at client sites. From what I can gather (based
on the error that is displayed), the registry key being
changed has something to do with the event log. I know
that when I log on to the application an 'User XXXX logged
on at XXXXXX' type entry appears in the Windows event log.
I assume it has something to do with this. If you can
confirm that this can definitely be done without having to
change the registry then I will demand the developers
correct it, otherwise I will adjust the registry
permissions as Harini suggested.

Regards

Abe

>-----Original Message-----
>Group policy is the long route to adjusting permissions
>on registry keys (or in NTFS filesystem)
>
>Asp.Net account should not need changes in the registry.
>What is the application, and what is it trying to do ?
>The only reason it may need these added permissions is
>due to what the application is trying to do.
>
>
>"Abe" > wrote in message
...
>> Hi Harini
>>
>> Can you tell me what the 'desired registry key' might be
>> for allowing the asp.net user to edit the registry? Is
>> there really no way of doing this through group policy?
>>
>> Thanks
>>
>> Abe
>>
>> >-----Original Message-----
>> >You can use the tool regedit and give the asp.net user
>> the permissions
>> >(right clicking on the desired registry key and get to
>> Permissions)
>> >Or you can use RegSetKeySecurity API if you want to do
it
>> programmatically
>> >
>> >--
>> >This posting is provided "AS IS" with no warranties,
and
>> confers no rights.
>> >Any opinions or policies stated within are my own and
do
>> not necessarily
>> >constitute those of my employer. Use of included script
>> samples are subject
>> >to the terms
>> >specified at http://www.microsoft.com/info/cpyright.htm
>> >
>> >
>> >"Abe" > wrote in message
>> ...
>> >> Hi
>> >>
>> >> I would like to know how to allow the asp.net user to
>> >> change the registry in order to run a web application
>> >> locally. At present I receive an application error
when
>> >> opening the application which seems to indicate that
the
>> >> aspnet user doesn't have rights to change the
registry.
>> >>
>> >> I could give the user admin rights, but I would
rather
>> >> not. I'm not very proficient in the use of group
policy
>> >> etc., but from what I understand I need to go into
MMC
>> and
>> >> add a snap-in, but as yet I've not been able to find
>> this
>> >> type of setting in any of the available standalone
snap-
>> >> ins. Where do I find such a setting and how do I add
it
>> to
>> >> this user?
>> >>
>> >> Thanks
>> >>
>> >> Abe
>> >
>> >
>> >.
>> >
>
>
>.
>