Registry Security via Command Line

[Guest]

Is it possible to change the security of registry keys via command line? In
deploying certain applications I would like to go through and set security on
particular keys in one swift swoop rather than log in as administrator and
then open up registry editor. Any ideas?

Thanks

 

[Torgeir Bakken \(MVP\)]

Is it possible to change the security of registry keys via command line? In
deploying certain applications I would like to go through and set security on
particular keys in one swift swoop rather than log in as administrator and
then open up registry editor. Any ideas?

Hi

Regini.exe or SetACL.exe is an option:

http://groups.google.co.uk/[email protected]

Regini comes builtin with WinXP (at least Pro), but is somewhat
limited. SetACL (freeware) has much more options.

SubInACL.exe can also be used for this, a new, bug-fixed version of
SubInACL.exe is available for download here (Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

 

[Guest]

I think Regini may be the best way to go, what is the best place to find
information on using this tool?

 

[Torgeir Bakken \(MVP\)]

I think Regini may be the best way to go, what is the best place to find
information on using this tool?

Hi

A Google site search at microsoft.com for regini:

http://www.google.com/search?as_q=r...tnG=Google+Search&as_sitesearch=microsoft.com

 

[Daniel Rudy]

Hi

A Google site search at microsoft.com for regini:

http://www.google.com/search?as_q=r...tnG=Google+Search&as_sitesearch=microsoft.com


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

This was exactly what I was looking for. Now how do you reference the
HKEY_CLASSES_ROOT? Furthermore, what permissions would you set to make a
key globally read only?