I am trying to set auditing on some registry keys and am having a weird issue. I seem to have to run SUBINACL twice to get the permissions to take. I need to do this in a batch mode, so SUBINACL seems to be the way to go, but I want to make sure I am doing it right. Attached is some output of the command.
C:\Program Files\Windows Resource Kits\Tools>subinacl.exe /keyreg HKEY_LOCAL_MACHINE\SOFTWARE\InterVideo\there333 /sdeny
SOFTWARE\InterVideo\there333 : new ace for \everyone
HKEY_LOCAL_MACHINE\SOFTWARE\InterVideo\there333 : 1 change(s)
Elapsed Time: 00 00:00:00
Done: 1, Modified 1, Failed 0, Syntax errors 0
Last Done : HKEY_LOCAL_MACHINE\SOFTWARE\InterVideo\there333