Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

registry editor could not set secuirty in the key currently selected, or some of its subkeys

Posted on 2012-03-19
6
Medium Priority
?
3,088 Views
Last Modified: 2016-11-23
I have a Dell Latitude XT2 tablet that I am trying to put Symantec Endpoint Full Disk Encryption on.
After Install and restart I get an error that says " cannot export settings to client database from settings" and " update settings failed please contact administrator".

I contacted Support at Symantec and they said the issue was that I needed to do the following
1.      Right click on HKLM\SOFTWARE\Encryption Anywhere, select Permissions.
2.      Click the Advanced button.
3.      Make sure "Inherit from parent..." and "Replace permission entries..." are checked.
4.      Click the Apply button.
5.      Respond "Yes" to question "This will remove explicitly defined permissions on all child objects..."
6.      Click OK twice.
 When I try to change thie key I get the following error.
registry editor could not set secuirty in the key currently selected, or some of its subkeys

Can anyone help me fix this problem.
0
Comment
Question by:Randy Madej
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 10

Expert Comment

by:CSI-Windows_com
ID: 37738427
Try Setacl.exe - you can list permissions and perhaps see if there are some keys that even admins are locked out of.

At the very least you could set permissions on everything else using the "-ignoreerr"  switch.

http://helgeklein.com/setacl/documentation/command-line-version-setacl-exe/
0
 

Author Comment

by:Randy Madej
ID: 37738991
I installed setacl.exe  On the interface  I can not find where to set The Replace all child object permissions with inheritable permissions from this object.

I ran this SetACL.exe -on c:\Windows -ot file -actn list from the command line and the run window with no luck.
0
 
LVL 10

Assisted Solution

by:CSI-Windows_com
CSI-Windows_com earned 1500 total points
ID: 37739198
If you need to restore default permissions to the entire OS - you can use the subsystem that does this during an actual workstation build.

Here is the command:

secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose

And here are some more details: http://support.microsoft.com/kb/313222
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 

Author Comment

by:Randy Madej
ID: 37739442
The use of “secedit /configure” to import the default security template, dfltbase.inf, is unsupported nor is it a viable method to restore default security permissions on Windows Vista, Windows 7, Windows Server 2008 and Windows Server 2008 R2 computers.

Beginning with Windows Vista, the method to apply the security during operating system setup changed. Specifically, security settings consisted of settings defined in deftbase.inf augmented by settings applied by the operating installation process and server role installation. Because there is no supported process to replay the permissions made by the operating system setup, the use of the “secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose” command line is no longer capable of resetting all security defaults and may even result in the operating system becoming unstable.
0
 
LVL 10

Accepted Solution

by:
CSI-Windows_com earned 1500 total points
ID: 37739472
Sorry about that!  The rest of the article details "icacls /restore" and the other commands required to restore your configuration.
0
 

Author Comment

by:Randy Madej
ID: 37766073
Icacls/restore did not work either. I ended up reloading the machine from scratch.

Thank you for trying .
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: Lee
Windows 7 Ultimate and Enterprise (and 2008 R2) introduced a new feature you may not be aware of - Boot from VHD.   Boot from VHD (or what Microsoft refers to asNative Boot allows you to install Windows to a VHD (Virtual Hard Disk) file that is t…
Assume you have an outside contractor who comes in seasonally or once a week to do some work in your office, but you only want to give him access to the programs and files he needs and keep all other documents and programs private. Can you do this o…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question