Changing Permission on an Administrative Object

You can restrict usage of the SiteConfig and GlobalConfig objects by modifying the access control lists (ACLs) on the registry keys for these object classes. To restrict access to these objects, change the permissions on these objects through the Windows Registry Editor.

To change the permission on an administrative object

1. Click Start, and then click Run.

2. In the Run dialog box, in the Open box, type regedt32.

3. Click HKEY_LOCAL_MACHINE.

4. On the View menu, click Find Key.

5. In the Find dialog box, in the Find what box, type the appropriate key, as shown in the following table.

   To find the key for this object	Type this
   SiteConfig	31B031AE-8877-4973-BC58-FEE0EF8CE07B
   GlobalConfig	CB438FDD-81EC-45FF-9DBB-9F9FBBF717AF

6. Clear the Match whole word only check box, and then click Find Next.

   A list of keys appears. The key you requested is marked as selected with a thin black border. You might have to scroll down the list to see the selected key.

7. Click the node for the key for which you searched.

8. In the Security menu, click Permissions.

9. In the Permissions dialog box, set the appropriate permissions based on your needs. Limit Read permissions to accounts that do not need to modify the Administration database.

Copyright © 2005 Microsoft Corporation.
All rights reserved.