Access Denied - Registry Key Permission

Hello!  I made a big mistake by changing the permissions to a registry key:
HKEY_Current_USER -> Software -> Microsoft -> Internet Explorer -> Main

Doing this has caused IE to not open.

I denied permissions to SYSTEM and maybe even ADMINISTRATORS and now I am unable to change them back.  I get an error that says it cannot open MAIN due to access denied and when I try to change ownership, it won't allow me to make the change.

Any ideas?
Celeste GrahamIT Support SpecialistAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yo_beeDirector of Information TechnologyCommented:
Was this change to the HKCU or lower down to the IE Key level?  You can go to higher level key that you have these rights inherit down . You can also try to see see if a system restore  would work?
0
Celeste GrahamIT Support SpecialistAuthor Commented:
I changed it lower down at the IE Main Key level as stated above.
0
yo_beeDirector of Information TechnologyCommented:
So see if going to the top level of IE key and see if applying inherited rights to child objects resolves the issue.
1
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

Tom CieslikIT EngineerCommented:
Few options

1. Restore computer from older recovery point

2. If this is Company network computer log on as Domain Admin open Registry Editor
Click on Computer, then File, Connect Network Registry
Navigate to the place where you've changed permissions and ADD SYSTEM and Domand Admins with full rights.
Try if you can open registry on affected computer - compare rights with other workstation and duplicate it.

3. Boot computer from CD like windows installer and navigate to C:\Windows\System32\config
Copy over SOFTWARE file to other drive/flash room

Use other Windows 7,8,10 Pro, open Registry Editor
Select HKEY_LOCAL_MACHINE
go to File
select LOAD HIVE and navigate to SOFTWARE file you've from affected computer.
Try revert changes, save registry and copy over back to affected workstation.

I Hope one of this method will work.
0
footechCommented:
@Tom - The C:\Windows\System32\config\SOFTWARE file doesn't apply here.  As this is HKCU, the file would be ntuser.dat under the user's profile folder.
0
Celeste GrahamIT Support SpecialistAuthor Commented:
Thank you yo_bee. I will see if that works!
0
John TsioumprisSoftware & Systems EngineerCommented:
if you have permission issues run regedt32 with admin rights...it has better control than regedit
0
Celeste GrahamIT Support SpecialistAuthor Commented:
None of these fixes worked for me.  I forgot to mention that we use VDI on thin clients.  This user has already been rebuilt and we thought that would fix the issue, but it did not.  Any ideas on how to fix this error on a VDI?
0
Tom CieslikIT EngineerCommented:
I think you have no choice like backup workstation ans swap out system and reinstall everything.
Because you've made changes in User registry User ID is affected so If you will delete this user and login as him again User ID will be the same so rights will propagate through registry again.
Or maybe not ?
Last chance is to do so. Before you'll reinstall everything try login as administrator and remove this user from Control Panel/ System/System Properties/User Profiles.
If you do that way all registry settings for this user should be swapped out.
Maybe if you log on again rights will be recreated.
0
yo_beeDirector of Information TechnologyCommented:
Are you using roaming profiles or Citrix UPM?  You need to find a copy or backup of the NTUSER.DAT.
0
Celeste GrahamIT Support SpecialistAuthor Commented:
We were able to resolve this issue by doing a complete rebuild from scratch on the VDI.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Celeste Graham (https:#a42386288)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer
0
John TsioumprisSoftware & Systems EngineerCommented:
I don't think that the selected "answer" is the answer to the issue...the system essentially was rebuilt so  either split the points to experts participated or delete the question.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.