REgistry Problems

[Joel WZ]

I am having some problems in the registry on a WinXP SP2 box. This box is
part of a SBS2003 network, where the server has had to be rebuilt and the xp
box had to be rejoined to the domain after the rebuild of the server.

What is happening, when I attempt to install some software, I get errors on
access denied on the registry. WHen I check those keys, I see a
GUID-looking id, instead of a domain or local ID in the permissions on the
effected keys. I can go in to the lowest level entry and manually delete
the GUID and add the proper accounts for permissions and things will work.
The problem is that I can't reset permissions at any level that the lowest.
So, to fix this manually, I would have to do so at thousands (probably
hundreds of thousands) of entries.

Is there some utility that can automate removing of the GUID-like id's and
replace them with a proper one? What are my options?

Thanks,
Joel WZ

 

[WTC]

Use subinacl from Microsoft.
http://www.microsoft.com/downloads/...56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en

Then try these commands:

subinacl /subkeyreg HKEY_LOCAL_MACHINE
/replace=DomainName\OldGUID=DomainName\NewAccount

subinacl /subkeyreg HKEY_CURRENT_USER
/replace=DomainName\OldGUID=DomainName\NewAccount

subinacl /subkeyreg HKEY_CLASSES_ROOT
/replace=DomainName\OldGUID=DomainName\NewAccount

Note: Some command lines may have wrapped.

The subinacl tool will be installed by default to:

C:\Program Files\Windows Resource Kits\Tools

For more information type

subinacl /?

at the "C:\Program Files\Windows Resource Kits\Tools" prompt.