Registry

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Registry

This security setting allows you to define access permissions and audit settings, and to take or assign ownership of individual registry keys.

Location

GPO_name\Computer Configuration\Windows Settings\Security Settings\Registry\

Default Values
Server Type or GPO Default Value

Default Domain Policy

Not defined for any key

Default Domain Controller Policy

Not defined for any key

Stand-Alone Server Default Settings

Not defined for any key

DC Effective Default Settings

Not defined for any key

Member Server Effective Default Settings

Not defined for any key

Discussion

The default permissions on registry keys allow full control by administrators and the system. Users have read-only permission, and the creator/owner can take or assign ownership of the key. This security setting can be used to change these default permissions, or to set specific permissions for other users and groups.

This security setting does not appear in the local Group Policy object.