Modify REG_BINARY values?

Posted on 2004-09-15
Last Modified: 2008-01-09
In reference to concerning XP SP2 and DCOM.

"Alternatively, you can configure these ACL settings using the registry.

These ACLs are stored in the registry at the following locations:

\MachineAccessRestriction= ACL

\MachineLaunchRestriction= ACL

This is a named-value that is set to a REG_BINARY type that contains data describing the ACL of the principals that can access any COM class or COM object on the computer. The access rights in the ACL are:






These ACLs can be created using normal security functions. Note that COM_RIGHTS_EXECUTE rights must always be present, because absence of this right will generate an invalid security descriptor.

Only users with Administrator rights can modify these settings."

I would like to edit the REG_BINARY "ACL"s mentioned in the article, but I have no idea how.  A program we run at the office here requires DCOM permissions that are different than the defaults.  This program is installed on 50 machines, and I'm looking for an easier way to make these changes other than walking around to 50 machines, opening Component Services, ....  Please note that I'm just the IT person in charge of this program at my company; I'm not a developer of this software.

So, is there a way to edit these REG_BINARY values do set them the way I want?  If there is, I was hoping to save the appropriate registry key and use a batch file that each user can run themselves.

I've already tried to make changes in Component Services, then copy the "before" and "after" reg keys to notepad, but I didn't recognize a difference between the two.

This isn't an urgent question, but I have a feeling it may be difficult or require a bit of work, so I assigned points accordingly.
Question by:JohnK813
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
LVL 20

Accepted Solution

DVation191 earned 500 total points
ID: 12064962
I would do this...

Configure one workstation to have the ACL configuration. Then export the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole key to your desktop.
Right click the .reg file and edit it, deleting the parts that don't need to be changed.

Then open up notepad, and type..

ECHO Changing DCOM ACL COnfiguration
ECHO Please wait...
REGEDIT /S ACL[your registry key's name].reg

Then save the notepad file as "ACL.BAT". Keep the reg key and the bat file in the same directory and now you will be able to make the changes in seconds instead of minutes.
LVL 14

Author Comment

ID: 12065207
Well, wouldn't you know it.  I assumed the "before" and "after" reg keys were the same because they looked the same, but I never tried running them.  Of course, your suggestion worked right away.

Thanks DVation.  Now all I need to do is combine that batch with the one that modifies the firewall settings (that was a little easier to figure out) and stick it on a network drive, and I'm set.  Thanks again for making my work a lot easier!
LVL 20

Expert Comment

ID: 12065249
no problem...i do it at my place of work all the time ;)

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Exchange Management Console Error - Initialization falied 18 157
SOA*.tmp files 2 181
ZEPTO Ransomware - Removal 8 93 6 54
Introduction Often we come across situations wherein our batch files would be needing to reboot Windows for a variety of reasons. A few of them would be like: (1) Setup files have been updated whose changes can take effect only after a reboot …
As the title indicates, I have done this before. It chills me everytime I update the OS on my phone, ( because one time I did this and I essentially had a bricked …
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question