Security Basics mailing list archives

RE: Windows 2000 Registry


From: "Bruyere, Michel" <mbruyere () ezemcanada com>
Date: Tue, 17 Jun 2003 11:58:41 -0400

Hi, 
        You can use the Group policies in Windows 2k to limit the way users
can access the registry. Another way would be to set the permissions within
regedt32, but be careful not to screw everyrthing up by denying legit
access.


My 0.02$

M.Bruyere

Hello!

I'm a newbie to this list, and I'm honoured to be part of a group so
willing to share its knowledge, time and altruism for the sake of
ignorami like myself.

Can anyone recommend a good tool (or tools) for locking down or even
encrypting the Windows 2000 registry at both the server and
workstation levels? I figure that a good starting point would be to
set up a policy removing access to cmd.exe and command.com as well as
the ability to execute regedit and regedt32. I hate to leave myself
open to all sorts of taunts and jeers, but is there anything more I
can do?

Many Thanks in Advance,

- Nick Russell


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: