Access Denied - Registry Key Permission

Hello!  I made a big mistake by changing the permissions to a registry key:
HKEY_Current_USER -> Software -> Microsoft -> Internet Explorer -> Main

Doing this has caused IE to not open.

I denied permissions to SYSTEM and maybe even ADMINISTRATORS and now I am unable to change them back.  I get an error that says it cannot open MAIN due to access denied and when I try to change ownership, it won't allow me to make the change.

Any ideas?
Celeste GrahamIT Support SpecialistAsked:
Who is Participating?
 
Celeste GrahamConnect With a Mentor IT Support SpecialistAuthor Commented:
We were able to resolve this issue by doing a complete rebuild from scratch on the VDI.
0
 
yo_beeDirector of Information TechnologyCommented:
Was this change to the HKCU or lower down to the IE Key level?  You can go to higher level key that you have these rights inherit down . You can also try to see see if a system restore  would work?
0
 
Celeste GrahamIT Support SpecialistAuthor Commented:
I changed it lower down at the IE Main Key level as stated above.
0
Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

 
yo_beeDirector of Information TechnologyCommented:
So see if going to the top level of IE key and see if applying inherited rights to child objects resolves the issue.
1
 
Tom CieslikIT EngineerCommented:
Few options

1. Restore computer from older recovery point

2. If this is Company network computer log on as Domain Admin open Registry Editor
Click on Computer, then File, Connect Network Registry
Navigate to the place where you've changed permissions and ADD SYSTEM and Domand Admins with full rights.
Try if you can open registry on affected computer - compare rights with other workstation and duplicate it.

3. Boot computer from CD like windows installer and navigate to C:\Windows\System32\config
Copy over SOFTWARE file to other drive/flash room

Use other Windows 7,8,10 Pro, open Registry Editor
Select HKEY_LOCAL_MACHINE
go to File
select LOAD HIVE and navigate to SOFTWARE file you've from affected computer.
Try revert changes, save registry and copy over back to affected workstation.

I Hope one of this method will work.
0
 
footechCommented:
@Tom - The C:\Windows\System32\config\SOFTWARE file doesn't apply here.  As this is HKCU, the file would be ntuser.dat under the user's profile folder.
0
 
Celeste GrahamIT Support SpecialistAuthor Commented:
Thank you yo_bee. I will see if that works!
0
 
John TsioumprisSoftware & Systems EngineerCommented:
if you have permission issues run regedt32 with admin rights...it has better control than regedit
0
 
Celeste GrahamIT Support SpecialistAuthor Commented:
None of these fixes worked for me.  I forgot to mention that we use VDI on thin clients.  This user has already been rebuilt and we thought that would fix the issue, but it did not.  Any ideas on how to fix this error on a VDI?
0
 
Tom CieslikIT EngineerCommented:
I think you have no choice like backup workstation ans swap out system and reinstall everything.
Because you've made changes in User registry User ID is affected so If you will delete this user and login as him again User ID will be the same so rights will propagate through registry again.
Or maybe not ?
Last chance is to do so. Before you'll reinstall everything try login as administrator and remove this user from Control Panel/ System/System Properties/User Profiles.
If you do that way all registry settings for this user should be swapped out.
Maybe if you log on again rights will be recreated.
0
 
yo_beeDirector of Information TechnologyCommented:
Are you using roaming profiles or Citrix UPM?  You need to find a copy or backup of the NTUSER.DAT.
0
 
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Celeste Graham (https:#a42386288)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer
0
 
John TsioumprisSoftware & Systems EngineerCommented:
I don't think that the selected "answer" is the answer to the issue...the system essentially was rebuilt so  either split the points to experts participated or delete the question.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.