Link to home
Start Free TrialLog in
Avatar of NAMEWITHELD12
NAMEWITHELD12Flag for United States of America

asked on

In need an example for a REGINI script i am trying to write

I am trying to replace permissions on a registry key on  a windows 64bit box
the key is HKLM\SOFTWARE and the permmsions i want is

ADMINSTRATORS=FULL
SYSTEMS=FULL
OWNERS=FULL
USERS=READ

any one have this exact syntax ?, if i can get this i can use it to write the rest of the script

Avatar of rlandquist
rlandquist
Flag of United States of America image

https://www.experts-exchange.com/questions/23054260/Change-Registry-permissions-using-VBScript-no-regini-exe.html

http://support.microsoft.com/?kbid=237607

See the above links for information.  The first one talks about creating the script, the microsoft link specifies the permission settings.

Avatar of NAMEWITHELD12

ASKER

Ok here is the issue and it is very similar to an issue I had with SUBINACL earlier, I run the command and no errors it but it does not change anything at all

I created a txt file with this in it

\Registry\Machine\Software [1 5 8]
saved it as a.txt


and then I run this command

“C:\Program Files (x86)\Windows Resource Kits\Tools” REGINI a.txt

it runs with no error whatsever and then it does not change the permissions on  the reg key I can change them with the GUI

I had this issue with SUBINCL also on a 32 bit box , I installed the latest version of SUBINACL and it worked , I installed the latest version of REGINI and am still having issues

THANKS!!!!
ASKER CERTIFIED SOLUTION
Avatar of rlandquist
rlandquist
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>"C:\Program Files (x86)\Windows Resource
 Kits\Tools\REGINI.exe"  Registry\Machine\Software [1 5 8]
The filename, directory name, or volume label syntax is incorrect.

C:\Documents and Settings\Administrator>cd\

C:\>"C:\Program Files (x86)\Windows Resource Kits\Tools\REGINI.exe"  Registry\Ma
chine\Software [1 5 8]
The filename, directory name, or volume label syntax is incorrect.

C:\>
what is intersting is that if i modify my a.txt file it will give errors , that is if i put junk in it that it cant understand like
hhhh\Registry\Machine\Software [1 5 8]



C:\>C:\"Program Files (x86)\Windows Resource Kits\Tools\REGINI" c:\a.txt
REGINI: CreateKey (hhhh\Registry\Machine\Software) relative to handle (000000000
) failed - 161
REGINI: Failed to load from file 'c:\a.txt' (161)



C:\>
now if i change that file back to

\Registry\Machine\Software [1 5 8]  

and run


\

C:\>C:\"Program Files (x86)\Windows Resource Kits\Tools\"REGINI c:\a.txt

C:\>

I get no error
but it does not change the registry permissions
I still cant get this to work , i am going to have to mod registry permissons on like 100 servers this weekend HELP!!!
i am using setacl and will post this soon
the issue mostly is in the fact the the permissions are inhertied from the parent , If you ever are trying to do this then use SETACL and make sure that you use the copy and not delete when you disaccocate the inherdance from the parent , I got in the situation that a key in the registry for 98% of the environment had the permissions specifically on this key , BUT some of the enviroment did not have the permssions specifcally defined and it removed all rights from this key and broke stuff

SO:
1. use setacl and make sure you COPY the rights and not only have rights that are on the specific key

2. make sure you run this in the front of the script to stop inherdance and copy the permissions


I will have the exact sytntax soon