Registry

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Registry

This security setting allows you to define access permissions and audit settings, and to take or assign ownership of individual registry keys.

Location

GPO_name\Computer Configuration\Windows Settings\Security Settings\Registry\

Default Values

Server Type or GPO	Default Value
Default Domain Policy	Not defined for any key
Default Domain Controller Policy	Not defined for any key
Stand-Alone Server Default Settings	Not defined for any key
DC Effective Default Settings	Not defined for any key
Member Server Effective Default Settings	Not defined for any key

Discussion

The default permissions on registry keys allow full control by administrators and the system. Users have read-only permission, and the creator/owner can take or assign ownership of the key. This security setting can be used to change these default permissions, or to set specific permissions for other users and groups.

This security setting does not appear in the local Group Policy object.