CA Tuesday Tip: _default resource for REGKEY/REGVAL class

Discussion created by Manabu_Taniguchi Employee on Jun 27, 2011
CA Accees Control Tuesday Tip by Manabu Taniguchi, Sr Support Engineer for 6/27/2011

_default resource for REGKEY/REGVAL class behaves as same as one for FILE class.
It only only takes effect when the user is a member of _restricted.

For users who are not members of the special _restricted group, AC protects only those registry keys or values that:
- Are defined by their individual names in the database
- Match a name pattern (for example, HKEY_LOCAL_MACHINE\SYSTEM\*) that is defined in the database

For users who belong to the group _restricted, all registry keys or values are protected.
For registry keys or values that are not defined in the database, authorization is based on the _default record of the REGKEY/REGVAL class.