3
1
I have 2 users:
Domain\Me (domain user)
.\MeAdmin (local administrator)
I frequently have to update my registry for multiple purposes (IE trusted sites, override policies, etc.).
e.g.
[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gov.pt]
[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gov.pt\portaldasfinancas]
"https"=dword:00000001
"http"=dword:00000001
My problem lies with the fact that have been told that I cannot make myself (domain account) local admin, I have to use an independent local admin account for all administrator tweaks.
The thing is, if I run this as user .\MeAdmin, it will run current user of MeAdmin and not user Domain\Me; if I run as Domain\Me, I will bump into permissions wall.
Is there a way to assign Domain\Me permissions to edit registry without being Administrator, or update current user of that account through local admin?
Note: I've read about remote registry connections, but I was hoping to still run this as a script/shell for automation purposes.
Update: When I run through domain user (all HKEY_CURRENT_USER entries):
Is that due to security policy, or technical reasons? – user1686 – 2017-06-12T11:08:53.310
I can make myself local admin but due to internal policies, I am not supposed to – Tiago Duarte – 2017-06-12T11:09:55.883
You have write access to HKCU. There is no need to use administrative rights. – Daniel B – 2017-06-12T11:18:22.817