Re: user level access problems: from CD

From: Harlan Carvey <keydet89(at)yahoo.com>
Date: Thu Apr 17 2003 - 14:17:23 EDT

Just out of curiosity, if this app is modifying the Registry, why aren't you using RegMon? FileMon doesn't show the Registry key accesses, necessarily.

On a system where you have admin privileges, install/run Regmon, and launch the CD. See which keys it accesses, then use a login script or WMI to make the necessary changes to the permissions on that Registry key. If it's only a limited number of employees, regedt32.exe would work, as well.

HTH, Harlan

• dataclaus1@hushmail.com wrote:
  >
  > -----BEGIN PGP SIGNED MESSAGE-----
  wl8EARECAB8FAj6e4QgYHGRhdGFjbGF1czFAaHVzaG1haWwuY29tAAoJEMX8YnuPyP0P
  >
  enQAn2rPqTJ9UbpvcfxdXLuIt4jMuhvDAJ41DgLmvZIAYI4DesSLLjYtyltuPA==
  > =h0C3
  https://www.hushmail.com/about.php?subloc=affiliate&l=427
  >
  >
  

  ---

  
  > Attend Black Hat Briefings & Training Europe, May
  

  ---

  
  >
  

  ---

Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo http://search.yahoo.com

---

Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the world's premier event for IT and network security experts. The two-day Training features 6 hand-on courses on May 12-13 taught by professionals. The two-day Briefings on May 14-15 features 24 top speakers with no vendor sales pitches. Deadline for the best rates is April 25. Register today to ensure your place. http://www.securityfocus.com/BlackHat-focus-ms

---

Received on Thu Apr 17 15:10:30 2003