How do I  change ACLs on hkey_classes_root using a script?

Posted on 2004-09-03
Medium Priority
Last Modified: 2013-12-04
I need to change permissions on some hkey_classes_root keys using a script and not regedt32.  I need to apply the change to many computers that run an application which won't run with user privileges and requires Administrator privileges on the local station to run.  I've found all the necessary keys to change an make the application functional, however I can only seem to change hkey_user and hkey_local_machine settings with the regini utility.  I can not find the script formatting necessary to change an hkey_root_classes ACL.

I also tried exporting keys with modified ACLs so I can re-imported them as a .reg file but the export/import does not retain the ACL permissions applied.

Any suggestion on how I could proceed?

Question by:dleblanc22
  • 2
  • 2
LVL 86

Accepted Solution

oBdA earned 2000 total points
ID: 11975781
It's easiest with subinacl.exe from the Resource Kit
subinacl.exe /keyreg HKEY_LOCAL_MACHINE\Software\Classes\YourKey /grant=YourUser
should work.

Windows Server 2003 Resource Kit Tools

As for regini, this should work as well as soon as you know that HKCR is just a "shortcut" to HKLM\Software\Classes.

Expert Comment

ID: 12034394
Also regedt32 can be used to alter any permissions
LVL 86

Expert Comment

ID: 12034415
... but not in a script.

Expert Comment

ID: 12039899
my mistake - I should have read  the original Qn more carefully.  thx

Featured Post

Train for your Pen Testing Engineer Certification

Enroll today in this bundle of courses to gain experience in the logistics of pen testing, Linux fundamentals, vulnerability assessments, detecting live systems, and more! This series, valued at $3,000, is free for Premium members, Team Accounts, and Qualified Experts.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
The video provides a quick and easy steps to migrate MBOX file to well known Outlook PST and Office 365. Besides this, it also supports and migrates more than 20 email clients of MBOX which include AppleMail, Opera, Thunderbird and SeaMonkey effortl…
Free Data Recovery software is an advanced solution from Kernel Tools to recover data and files such as documents, emails, database, media and pictures, etc. It supports recovery from physical & logical drive after a hard disk crash, accidental/inte…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question