How to Add Custom Registry Settings to Security Configuration Editor

ID: Q214752

The information in this article applies to:

Microsoft Windows NT Workstation version 4.0
Microsoft Windows NT Server version 4.0
Microsoft Windows 2000 Server
Microsoft Windows 2000 Professional

IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

SUMMARY

You can use the Security Configuration Tool Set for deploying security settings. These settings include object permissions (permissions on files, services, and the registry), user rights, password and account policies, group memberships, and registry settings.

This article describes how to add registry settings to the Security Configuration Tool Set.

MORE INFORMATION

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).

There are many registry settings that affect the security of a Windows NT-based computer. These registry settings configure options such as whether or not to send your down-level LAN Manager-compatible password, or to disable use of the floppy disk drive.

The Security Configuration Tool Set includes many registry settings that you can choose to help secure a Windows NT-based computer. You may find that there is a registry setting that you would like to deploy to help secure your computers that is not included in the Security Configuration Tool Set interface by default. In this case, you can extend the Security Configuration Tool Set to add registry settings.

The Security Configuration Tool Set checks the registry under the following key:


   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ 
   SeCEdit\RegValues

NOTE: The above registry key is one path; it has been wrapped for readability.

The subkeys under the RegValues key are named for the path to the registry value they are going to set. For example, the name of the subkey for


   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ 
   LanmanServer\Parameters\Hidden

is:


   MACHINE\System\CurrentControlSet\Services\LanmanServer\ 
   Parameters\Hidden

NOTE: "Hidden" is a Reg_DWord value, not a subkey.

The registry values in the subkey are:

DisplayName: Reg_Sz - This is where you enter the text to be displayed in the Security Configuration Tool Set under Local Policies\Security Options.

DisplayType: Reg_DWord - This determines the interface you see when modifying this setting.

Value	Interface
0	Enabled/Disabled check box (Enabled = 1, Disabled = 0)
1	Scroll box (Range from 0-999)
2	Text box
3	Always/As Request/Not Compatible check box *
>=4	Enabled; Disabled check box (Enabled = 1, Disabled = 0)

* Always = 0, As Request = 1, Not Compatible = 2

ValueType: Reg_DWord - This determines what data type the value will be. Some of the common data types are listed below.

Value	DataType
0	REG_NONE
1	REG_SZ
2	REG_EXPAND_SZ
3	REG_BINARY
4	REG_DWORD
5	REG_DWORD_BIG_ENDIAN
6	REG_LINK
7	REG_MULTI_SZ
8	REG_RESOURCE_LIST
9	REG_FULL_RESOURCE_DESCRIPTOR
A	REG_RESOURCE_REQUIREMENTS_LIST

Additional query words: Manager SCE SCM SECEDIT SECMGR

Keywords : kbenv kbtool
Version : WINDOWS:2000; winnt:4.0
Platform : WINDOWS winnt
Issue type : kbinfo