Changing Registry Key permissions

[Bruce Chambers]

Greetings --

Does anyone know of a means to modify the permissions of several
registry keys via a script or a batch file?

I've a legacy application that will not work properly unless the
users either have "Full Control" of its several registry entries, or
are assigned to the local Power Users group. Naturally, I'd rather
not assign the broader permissions if I can avoid it. While it's easy
enough to modify the permissions manually via Regedt32, this process
is very time consuming when applied to several hundred workstations.

I have already tried setting the permissions on the keys,
exporting them, and then importing them to a different PC. The new
permissions settings did not go along with the imported keys.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Mark V]

Bruce Chambers wrote in

Greetings --

Does anyone know of a means to modify the permissions of
several
registry keys via a script or a batch file?

I've a legacy application that will not work properly unless
the
users either have "Full Control" of its several registry entries,
or are assigned to the local Power Users group. Naturally, I'd
rather not assign the broader permissions if I can avoid it.
While it's easy enough to modify the permissions manually via
Regedt32, this process is very time consuming when applied to
several hundred workstations.

I have already tried setting the permissions on the keys,
exporting them, and then importing them to a different PC. The
new permissions settings did not go along with the imported keys.

Perhaps SetAcl.exe
http://setacl.sourceforge.net

Documentation could be better, but I believe it's the tool you want.
Of course it probably needs to run in context of an Admin.
psexec.exe perhaps?

regini.exe (ResKit) but I never liked it much.

If it were not for the command-line requirement, a "Save key",
"Restore..." in regedt32 would possibly be a solution as it
saves/restores ACLs.

 

[Bruce Chambers]

Greetings --

Thanks, I'll look into your suggestions.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH