Solved

How do I  change ACLs on hkey_classes_root using a script?

Posted on 2004-09-03
4
1,558 Views
Last Modified: 2013-12-04
I need to change permissions on some hkey_classes_root keys using a script and not regedt32.  I need to apply the change to many computers that run an application which won't run with user privileges and requires Administrator privileges on the local station to run.  I've found all the necessary keys to change an make the application functional, however I can only seem to change hkey_user and hkey_local_machine settings with the regini utility.  I can not find the script formatting necessary to change an hkey_root_classes ACL.

I also tried exporting keys with modified ACLs so I can re-imported them as a .reg file but the export/import does not retain the ACL permissions applied.

Any suggestion on how I could proceed?

Thanks!
0
Comment
Question by:dleblanc22
  • 2
  • 2
4 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 500 total points
ID: 11975781
It's easiest with subinacl.exe from the Resource Kit
subinacl.exe /keyreg HKEY_LOCAL_MACHINE\Software\Classes\YourKey /grant=YourUser
should work.

Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

As for regini, this should work as well as soon as you know that HKCR is just a "shortcut" to HKLM\Software\Classes.
0
 
LVL 2

Expert Comment

by:andyswarbs
ID: 12034394
Also regedt32 can be used to alter any permissions
0
 
LVL 84

Expert Comment

by:oBdA
ID: 12034415
... but not in a script.
0
 
LVL 2

Expert Comment

by:andyswarbs
ID: 12039899
my mistake - I should have read  the original Qn more carefully.  thx
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Secure removal of files encrypted by windows EFS 20 129
Security Permissions Issues 10 81
Assess most serious Linux privilege escalation bug 17 191
SHA2 certs for IIS AND Java? 2 122
Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question