How do I set registry key permissions using GPO

[m***@gmail.com]

Hi, I am trying to force users to log off computers after a period of
inactivity. I am trying to use winexit.scr to accomplish this. The
Screen Saver is installed and works for the most part. I am using
Group Policy to set the screen saver as winexit.scr (logoff screen
saver) and to set the time in which it should run. This all works
fine. The problem is when a standard user is logged on the computer I
get this “Error encountered while creating registry key. Make sure
you have set values and create subkey permissions.” Ok, so according
to a Microsoft article http://support.microsoft.com/kb/q156677/ the
solution is to change the permissions on a registry key
HKEY_Local_Machine\Software\Microsoft\Windows NT\CurrentVersion
\IniFileMappings\Control.ini so all users have set value and create
subkey permissions. The problem is I do not want to go to every
computer and set this manually. I would be very happy to have a GPO
set this for me. I am using the same GPO that sets the screen saver to
also set permissions for the control.ini key. I went to the GPO 
computer configuration  windows settings security settings 
registry added the key and set the security settings/permissions on it
using the groups I have created in Active Directory. Is this how I am
supposed to do this because it is not working? When I go to the
computers and login as a standard user I still get the error and when
I open regedit as that user and go to the key I still have no access
to do anything to that key. Could someone please tell me what I am
doing wrong?

[Herb Martin]

From the Computer->Windows Settings->Security-> Registry area.

BUT you must TEST such things VERY carefully.

<***@gmail.com> wrote in message news:***@p77g2000hsh.googlegroups.com...
Hi, I am trying to force users to log off computers after a period of
inactivity. I am trying to use winexit.scr to accomplish this. The
Screen Saver is installed and works for the most part. I am using
Group Policy to set the screen saver as winexit.scr (logoff screen
saver) and to set the time in which it should run. This all works
fine. The problem is when a standard user is logged on the computer I
get this "Error encountered while creating registry key. Make sure
you have set values and create subkey permissions." Ok, so according
to a Microsoft article http://support.microsoft.com/kb/q156677/ the
solution is to change the permissions on a registry key
HKEY_Local_Machine\Software\Microsoft\Windows NT\CurrentVersion
\IniFileMappings\Control.ini so all users have set value and create
subkey permissions. The problem is I do not want to go to every
computer and set this manually. I would be very happy to have a GPO
set this for me. I am using the same GPO that sets the screen saver to
also set permissions for the control.ini key. I went to the GPO ?
computer configuration ? windows settings ?security settings ?
registry added the key and set the security settings/permissions on it
using the groups I have created in Active Directory. Is this how I am
supposed to do this because it is not working? When I go to the
computers and login as a standard user I still get the error and when
I open regedit as that user and go to the key I still have no access
to do anything to that key. Could someone please tell me what I am
doing wrong?