[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    Re: User rights/Registry rights for CAPI
From:       Jeff Spelman <jeffspel () MICROSOFT ! COM>
Date:       1999-06-28 20:44:11
[Download RAW message or body]


David
   CryptoAPI needs to access the registry keys under
HKLM\Software\Microsoft\Cryptography\Defaults with READ access and needs
FULL access for HKCU\Software\Microsoft\Cryptography\UserKeys.  If Machine
keys are to be used then FULL access is also needed for
HKLM\Software\Microsoft\Cryptography\MachineKeys.
Thanks Jeff

-----Original Message-----
From: Cash, David [mailto:cashdl@RBOS.CO.UK]
Sent: Monday, June 28, 1999 4:17 AM
To: CryptoAPI@DISCUSS.MICROSOFT.COM
Subject: User rights/Registry rights for CAPI


Hi,

does anyone know what the minimum set of user rights and registry access
rights are required for a user to use CAPI on NT 4 SP4? I'm trying to tie
down a user account, but if I limit the access I get a lot of security log
(object access) fail events, under the HKLM hive where it appears to be
looking for various component versions. A normal cryptacquirecontext
NEWKEYSET fails with an error saying key not found. This is not using the
MACHINEKEYSET flag right now but may be at some point.

Ideally i'd like to be able to tie things down to the exact registry paths
required, though I guess because of private keys this may not be possible.

Thanks in advance for your help.

Regards,
Dave



This e-mail message is confidential and for use by the addressee only.  If
the message is received by anyone other than the addressee, please return
the message to the sender by replying to it and then delete the message from
your computer.

'Internet e-mails are not necessarily secure. The Royal Bank of Scotland plc
does not accept responsibility for changes made to this message after it was
sent.'

----------------------------------------------------------------
Users Guide http://msdn.microsoft.com/workshop/essentials/mail.asp
contains important info including how to unsubscribe.  Save time, search
the archives at http://discuss.microsoft.com/archives/index.html

----------------------------------------------------------------
Users Guide http://msdn.microsoft.com/workshop/essentials/mail.asp
contains important info including how to unsubscribe.  Save time, search
the archives at http://discuss.microsoft.com/archives/index.html

[prev in list] [next in list] [prev in thread] [next in thread]