Home / server / Questions / 678408
Accepted
Matthias Güntert
Asked: 2015-03-27 02:50:16 +0800 CST

Group Policy Preferences - Registry: 0x80070005 Access is denied

  • 772

I have created a GPO to apply several registry keys to a Windows Server 2008 R2 machine in my lab. The relevant keys are within HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet and I have therefor used the Computer Configurationpart of the GPO.

Unfortunately it won't apply. The machine complains with:

enter image description here

I have tried both actions Create and Update within the GPP, but it does not make a difference.

The Windows Server 2008 R2 machine is a plain vanilla installation without any Windows updates installed. Unfortunately I have no easy Access to Windows Update as I am forced to work in a very restricted Environment. Is anyone are of a KB article addressing this? I just don't see what I am doing wrong here.

windows-server-2008-r2

1 Answers

  1. Best Answer

    This is because SYSTEM does not have the permissions to edit every registry entry.
    For this particular registry key, the SYSTEM user only has read access.

    This has since been worked around though.

    1. Open according GPO or create a new GPO.
    2. Navigate to the following location:

    [Computer Configuration\Policies\Windows Settings\Security Settings\Registry]

    1. Right-click right-panel, choose Add Key to add "Machine\SOFTWARE\Microsoft\Rpc" and give Full Control permission to Admin and SYSTEM.
    2. Run "gpupdate /force" and test.
    • 3