Re: Vulnerability in Windows 2000 policy

[Masial <masial () SECURED ORG>]

As far as i know, there is no real point in disabling registry editing tools
as anyone with a brain and a floppy can download and use some other registry
editing tool (unless they block the calls to edit the keys in the api but
that would break most software).

What you are looking at there is bad registry permissions. If you set your
permissions correctly, users will only be able to modify keys that are their
own and therefore only blow up their own stuff (hey, their problem).

This does not look as much of a problem to me. Then again, maybe i
overlooked something...

Masial

> -----Original Message-----
> From: Andrejus Stavickis
>
> but user still able to merge .REG file into the registry. So there are one
> step for user needed to disable policies: create a .reg file and merge it
> into the registry, Also there are a possibility to control file
> extensions, but it's don't help.