Registry Privileges and Policies

In Windows NT, 2000, and XP Professional, Registry keys and values can have permissions set to define who has permission to view and edit them, just like folders and files. The Windows Policies system, which allows administrators to restrict users' ability to change their computer configuration, is based on Registry access control.

In a nutshell, Policies install Registry keys and values that tell Windows administrative programs such as Control Panel to hide certain controls and settings. For example, a policy entry might make the Display Control Panel hide the Power Management settings. These restricting Registry entries are then locked into place with permission settings that prevent the users from seeing or changing them.

You don't usually manage these entries using Regedit, but by using the Policy Editor and Manager, which is described in Chapter 28, "Managing Users."

CAUTION

I gave this warning before, but it bears repeating: Trying to manually change Registry privileges is very dangerous. Don't do it! You could easily render your system not only inoperative, but also out of your own ability to repair.

NOTE

I have one more tip that's so cool, I put it at the end of the chapter under "Tips from the Windows Pros."