Link to home
Start Free TrialLog in
Avatar of Celeste Graham
Celeste Graham

asked on

Access Denied - Registry Key Permission

Hello!  I made a big mistake by changing the permissions to a registry key:
HKEY_Current_USER -> Software -> Microsoft -> Internet Explorer -> Main

Doing this has caused IE to not open.

I denied permissions to SYSTEM and maybe even ADMINISTRATORS and now I am unable to change them back.  I get an error that says it cannot open MAIN due to access denied and when I try to change ownership, it won't allow me to make the change.

Any ideas?
Avatar of yo_bee
Flag of United States of America image

Was this change to the HKCU or lower down to the IE Key level?  You can go to higher level key that you have these rights inherit down . You can also try to see see if a system restore  would work?
Avatar of Celeste Graham
Celeste Graham


I changed it lower down at the IE Main Key level as stated above.
So see if going to the top level of IE key and see if applying inherited rights to child objects resolves the issue.
Few options

1. Restore computer from older recovery point

2. If this is Company network computer log on as Domain Admin open Registry Editor
Click on Computer, then File, Connect Network Registry
Navigate to the place where you've changed permissions and ADD SYSTEM and Domand Admins with full rights.
Try if you can open registry on affected computer - compare rights with other workstation and duplicate it.

3. Boot computer from CD like windows installer and navigate to C:\Windows\System32\config
Copy over SOFTWARE file to other drive/flash room

Use other Windows 7,8,10 Pro, open Registry Editor
go to File
select LOAD HIVE and navigate to SOFTWARE file you've from affected computer.
Try revert changes, save registry and copy over back to affected workstation.

I Hope one of this method will work.
@Tom - The C:\Windows\System32\config\SOFTWARE file doesn't apply here.  As this is HKCU, the file would be ntuser.dat under the user's profile folder.
Thank you yo_bee. I will see if that works!
if you have permission issues run regedt32 with admin has better control than regedit
None of these fixes worked for me.  I forgot to mention that we use VDI on thin clients.  This user has already been rebuilt and we thought that would fix the issue, but it did not.  Any ideas on how to fix this error on a VDI?
I think you have no choice like backup workstation ans swap out system and reinstall everything.
Because you've made changes in User registry User ID is affected so If you will delete this user and login as him again User ID will be the same so rights will propagate through registry again.
Or maybe not ?
Last chance is to do so. Before you'll reinstall everything try login as administrator and remove this user from Control Panel/ System/System Properties/User Profiles.
If you do that way all registry settings for this user should be swapped out.
Maybe if you log on again rights will be recreated.
Are you using roaming profiles or Citrix UPM?  You need to find a copy or backup of the NTUSER.DAT.
Avatar of Celeste Graham
Celeste Graham

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Celeste Graham (https:#a42386288)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

Experts-Exchange Cleanup Volunteer
I don't think that the selected "answer" is the answer to the issue...the system essentially was rebuilt so  either split the points to experts participated or delete the question.