SetACL and Registry Permissions

[copyleft]

I've looked at a bunch of SetACL examples on this site and none seem to be able to convert this batch script into a working AutoIt script.

BATCH

@echo off
"%~dp0setacl.exe" -on "HKEY_CLASSES_ROOT\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}\DefaultIcon" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "HKEY_CLASSES_ROOT\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}\DefaultIcon" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
Reg.exe add "HKCR\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}\DefaultIcon" /ve /t REG_EXPAND_SZ /d "C:\My.ico" /f

NON-WORKING AUTOIT

RunWait('setacl.exe "HKCR64\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}\DefaultIcon" -ot reg -actn setowner -ownr "n:administrators"')
RunWait('setacl.exe "HKCR64\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}\DefaultIcon" -ot reg -actn setowner -ownr "n:administrators;p:full"')
RegWrite('HKCR64\CLSID\{9C60DE1E-E5FC-40f4-A487-460851A8D915}\DefaultIcon', '','REG_EXPAND_SZ','C:\Windows\My.ico')

Any ideas on what I'm doing wrong?
 

[Nine]

put msgbox (0,"",@error) after regwrite so we know what type of error you are getting

[copyleft]

It says "0" in the msgbox.

[TheXman]

1.  HKCR64 only has meaning to AutoIt registry functions.  Change the registry keys, used in the RunWait commands, back to their actual names like in the batch file.
2. Since changes to HKCR are system-wide, your script probably needs to execute with elevated privileges.  So you may need to add the #RequireAdmin directive to the beginning of your script or make sure that it is elevated by other means.

Edited January 30, 2019 by TheXman

[copyleft]

@TheXman. You nailed it! Thanks.

[TheXman]

You're welcome!