Changing permissions on registry keys

I want to allow full access for all users for two keys.

So far I know of two ways, regini.exe (and a \Registry\HKEY_LOCAL_MACHINE\Software\KeyName [1 5 7 17] script)
and using regedt32 (Security->Permissions menu).

We are running Windows 2000 server. Are there any issues I should know of, or things I should take care of in doing this? I have little experience in modifying the registry, and so just would like to know the best way, possible pitfalls.

Who is Participating?
valiconConnect With a Mentor Commented:
You need to be very careful when editing anything in the registry.  Here is a link that will show you how to change permissions in the registry:

The ways that you have outlined are the only ways that I am aware of.  Before you do anything to your registry, perform a backup of your registry just in case things don't go as planned.  Hope this helps
Justin DurrantConnect With a Mentor Sr. Engineer - Windows Server/VirtualizationCommented:
Hi RichardFox,

We have done this via regedt32 on many servers... no issues as of yet.

oBdAConnect With a Mentor Commented:
Setting permissions on a registry key basically works the same as setting NTFS permissions on a folder. The pitfalls are the same: Be very careful with Deny, and make sure you don't lock out the Administrator. If you simply add a user group to an ACL, there shouldn't be an issue (apart from members of this group being able to write to that key).
If you need to do this for a bunch of machines, and you have the W2k Resource Kit, you can use subinacl.exe to set the permissions from the commandline as well. It's easier to handle than regini.
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

RichardFoxAuthor Commented:
Where is the registry, so that I may back it up?
Also I would recommend testing your registry edits on 1 computer to ensure that it works as you would like it, then if you get the desired results you can apply the same settings to other machines. If you don't you can just restore the registry back to it's original state using the links I gave you :)  
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.