Hey guys,

I generally a desktop support guy so my VB skills are pretty much what i can find on google. so be nice and keep the instructions one step above monkey!

Basically I am going through the process of removing admin rights from users desktops.
A couple of the applications require admin access to run. which we can manually get around by going into the registry adding the everyone group with full access to the specific reg key as well as some "normal folder permissions"

I have managed to automate most of the process but i am a little stuck on what i hope is a very simple issue.



I made a very basic VBS that does the following

set oFSO = CreateObject("Scripting.FileSystemObject")
strFileName = oFSO.GetTempName
set oFile = oFSO.CreateTextFile(strFileName)
oFile.WriteLine "HKEY_LOCAL_MACHINE\SOFTWARE\Bloomberg L.P. [1 5 7 11 17]"

Now, if i did this manaually and added the group it would propergate down to all the sub directories of the reg key with no other input required.
this script only seems to set the permissions at the top level.


This is where it gets weird though i can log off, log in as a different user reboot and the permissions will not propergate down, HOWEVER whilst testing i made a local user called test added that to the registry permissions group (just to see what happened) the test users permissions propergated down AND through the test user to the group it seemed to force the propergation of the everyone group. which frankly was very strange.

So long story short could someone tell me how to fiorce "HKEY_LOCAL_MACHINE\SOFTWARE\Bloomberg L.P. [1 5 7 11 17]"

to propergate down wothout any manual input?

As stated im not a VB guy so please be kind and keep it simple all the assistance is much appreciated!

Thanks