<div>
Reset the entire registry permissions to defaults<br />
<a href="http://www.windowsreference.com/security/reset-the-entire-registry-permissions-to-defaults/" rel="ugc">http://www.windowsreference.com/security/reset-the-entire-registry-permissions-to-defaults/</a><br />
<br />
Personally, I would also add &quot;Users&quot; with &quot;READ&quot; permissions, on HKLM.....
</div>


Reset the entire registry permissions to defaults
http://www.windowsreference.com/security/reset-the-entire-registry-permissions-to-defaults/ [http://www.windowsreference.com/security/reset-the-entire-registry-permissions-to-defaults/]

Personally, I would also add "Users" with "READ" permissions, on HKLM.....

<div>
<div class="content wysiwyg-content">
OK guys- here's what happened.<br />
<br />
A Group Policy was applied to out Domain (400+ Machines) that re-permissioned the entire subordinate registry keys etc. on HKLM\System &amp;&nbsp;HKLM\Software. We are scrambling to first find the correct permissions of keys identified as wrong and then push these out in GP to repair this oversight. &nbsp;I'm looking for a way to take an ACL 'snapshot' of a known good registry, edit that, and apply to all affected machines. Looking to do this for Windows XP and Windows 7 workstations. I have a ticket open with Microsoft and they are telling me I need to manually 'find' the incorrect keys and script the fixes. While pushing out the fixes are not the issue- finding the wrong keys from problems known and unknown will be tremendous. <br />
<br />
Anyone have any Ideas?
</div>
</div>


OK guys- here's what happened.

A Group Policy was applied to out Domain (400+ Machines) that re-permissioned the entire subordinate registry keys etc. on HKLM\System & HKLM\Software. We are scrambling to first find the correct permissions of keys identified as wrong and then push these out in GP to repair this oversight.  I'm looking for a way to take an ACL 'snapshot' of a known good registry, edit that, and apply to all affected machines. Looking to do this for Windows XP and Windows 7 workstations. I have a ticket open with Microsoft and they are telling me I need to manually 'find' the incorrect keys and script the fixes. While pushing out the fixes are not the issue- finding the wrong keys from problems known and unknown will be tremendous. 

Anyone have any Ideas?

Transfer Registry ACLs to a different system-

Windows 7 is an operating system from Microsoft. Features include multi-touch support, a redesigned Windows Shell with a new taskbar, referred to as the Superbar, a home networking system called HomeGroup, and performance improvements.

Windows 7

Microsoft Windows XP is the sixth release of the NT series of operating systems, and was the first to be marketed in a variety of editions: XP Home and XP Professional, designed for business and power users. The advanced features in XP Professional are generally disabled in Home Edition, but are there and can be activated. There were two 64-bit editions, an embedded edition and a tablet edition.