Previous | Table of Contents | Next |
Windows NT Security is a popular topic of discussion these days. Modifying these registry entries lets you set security as tightly or as loosely as you need to.
For each of the following keys, set the following permission.
Group: | Permission |
Everyone: | QueryValue, Enumerate Subkeys, Notify, Read Control |
To see the permissions that are already set, select the key in Regedt32.exe and go to the Security menu.
V-1 | Hive: | HKEY_LOCAL_MACHINE |
Key: | Software\ |
I strongly recommend setting this parameter. It determines who can install software. However, I dont recommend locking the entire subtree using this setting because that can render certain software unusable. Here is a list of each individual subtree. Changing each subtree lets you exert greater control over each individual software component.
V-2 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\RPC |
V-3 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion |
V-4 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\Profile List |
V-5 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\AeDebug |
V-6 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\Compatibility |
V-7 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\Drivers |
V-8 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\Embedding |
V-9 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\Fonts |
V-10 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\ FontSubstitutes |
V-11 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\Font Drivers |
V-12 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\Font Mapper |
V-13 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\Font Cache |
V-14 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\ GRE_Initialize |
V-15 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\MCI |
V-16 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\ MCI Extensions |
V-17 | Hive: | HKEY_LOCAL_MACHINE | |
Key: | Software\Microsoft\WindowsNT\CurrentVersion\PerfLib |
Previous | Table of Contents | Next |