OS: Windows 7
Desirable Method: Command Line
Other acceptable methods: VBScript
How can I use the command line to set registry permissions? I found the REGINI utility, but I'm not having any luck since the documentation is really not user-friendly. I need to set the permissions on the following to prevent the user from editing. Basically, I need to set this as read-only:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData
The ideal permissions would allow SYSTEM and Administrator Full Control, but set as Read Only for everyone else (or at least non-Admins).
For a little background, this is where, in IE 11 the Compatibility View sites are held (in binary nonetheless). I'm injecting that binary glob, but because we have the option set in IE to clear browsing history upon exit, that 'ClearableListData' value is also purged. Stupid, I know, so I need to prevent users from modifying the value.
EDIT: Here's a Connect post describing the problem of IE purging the list: https://connect.microsoft.com/IE/feedback/details/798447/compatibility-view-list-is-lost-if-browsing-history-is-erased-or-site-uses-meta-tag
Thanks, Beems
This is an example of the XY Problem
The correct way to lock down this setting is to use Group Policy. You don't mention if this computer is on a domain or not, but if it isn't, you can use the Local Group Policy Editor for the same effect. Click on Start -> Run and type gpedit.msc
to open the editor.
The specific setting you're after is under Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Compatibility View
. The setting is called Use Policy list of Internet Explorer 7 sites
.
The sites that appear on this list will always open in Compatibility View, and doing a browser reset will not change that setting at all. The setting survives because enforced Group Policies are located in a different place in the Registry and are unaffected by the bug listed in that Microsoft article you linked to.
本文收集自互联网,转载请注明来源。
如有侵权,请联系[email protected] 删除。
我来说两句