Solved

How do I  change ACLs on hkey_classes_root using a script?

Posted on 2004-09-03
4
1,561 Views
Last Modified: 2013-12-04
I need to change permissions on some hkey_classes_root keys using a script and not regedt32.  I need to apply the change to many computers that run an application which won't run with user privileges and requires Administrator privileges on the local station to run.  I've found all the necessary keys to change an make the application functional, however I can only seem to change hkey_user and hkey_local_machine settings with the regini utility.  I can not find the script formatting necessary to change an hkey_root_classes ACL.

I also tried exporting keys with modified ACLs so I can re-imported them as a .reg file but the export/import does not retain the ACL permissions applied.

Any suggestion on how I could proceed?

Thanks!
0
Comment
Question by:dleblanc22
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 85

Accepted Solution

by:
oBdA earned 500 total points
ID: 11975781
It's easiest with subinacl.exe from the Resource Kit
subinacl.exe /keyreg HKEY_LOCAL_MACHINE\Software\Classes\YourKey /grant=YourUser
should work.

Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

As for regini, this should work as well as soon as you know that HKCR is just a "shortcut" to HKLM\Software\Classes.
0
 
LVL 2

Expert Comment

by:andyswarbs
ID: 12034394
Also regedt32 can be used to alter any permissions
0
 
LVL 85

Expert Comment

by:oBdA
ID: 12034415
... but not in a script.
0
 
LVL 2

Expert Comment

by:andyswarbs
ID: 12039899
my mistake - I should have read  the original Qn more carefully.  thx
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

689 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question