Use BUILTIN\administrators as owner of the default registry key security descriptor.

Michael

diff --git a/source/registry/reg_dispatcher.c b/source/registry/reg_dispatcher.c
index e6e76134570512f1efaa812bbe8de8ff6fb6b0a7..93b36f9289d7df52ba589e9a03ca4e7e767cf52c 100644 (file)
--- a/source/registry/reg_dispatcher.c
+++ b/source/registry/reg_dispatcher.c
@@ -63,7 +63,7 @@ static SEC_DESC* construct_registry_sd( TALLOC_CTX *ctx )
        if ( !(acl = make_sec_acl(ctx, NT4_ACL_REVISION, i, ace)) )
                return NULL;
 
-       if ( !(sd = make_sec_desc(ctx, SEC_DESC_REVISION, SEC_DESC_SELF_RELATIVE, NULL, NULL, NULL, acl, &sd_size)) )
+       if ( !(sd = make_sec_desc(ctx, SEC_DESC_REVISION, SEC_DESC_SELF_RELATIVE, &global_sid_Builtin_Administrators, NULL, NULL, acl, &sd_size)) )
                return NULL;
 
        return sd;