Registry Permissions settings

[tazdev]

Is there a way to change the permissions on a key? I tried to export the key from the registry but the .reg file doesn't note what the security settings are. Basically I want HKEY_LOCAL_MACHINE\blahblahblah\blah to allow Users full control over that part of the registry. I see RegWrite so I know that would be what I would use to write it but does anyone know how to export the settings to a reg file to be imported into the registry?

I am looking for something other than actually calling up regedt32 and changing it.

I assume I can import the key, then have AutoIT open the regedt32, go to the key, mouse click it then mouse click the Security Menu, then Permissions, then wait for the Dialoge box, click users, click Full Control, Press OK, Close regedt32, logoff.

[tazdev]

hmm quick google found this:

http://www.windowsnetworking.com/kbase/Win...ommandLine.html

[tazdev]

NM regperm will do it. Run that in AutoIt to account for the switches you need and BAM

[Jos]

Is there a way to change the permissions on a key? I tried to export the key from the registry but the .reg file doesn't note what the security settings are. Basically I want HKEY_LOCAL_MACHINE\blahblahblah\blah to allow Users full control over that part of the registry. I see RegWrite so I know that would be what I would use to write it but does anyone know how to export the settings to a reg file to be imported into the registry?

I am looking for something other than actually calling up regedt32 and changing it.

I assume I can import the key, then have AutoIT open the regedt32, go to the key, mouse click it then mouse click the Security Menu, then Permissions, then wait for the Dialoge box, click users, click Full Control, Press OK, Close regedt32, logoff.

<{POST_SNAPBACK}>

i am using SetAcl for that....

[tazdev]

Now $pcname = PCName specified by user

regperm.exe is in the C:\i386 I even put in a sleep(100) to make sure it copied over fine first.

When I run it I get runwait(@comspec "/c" & "C:\i386\REGPERM.EXE /K HKEY_LOCAL_MACHINE\Software\bbb \\" & $pcname & " /A:Users:F /E")

Error: Unable to execute the external program

The system cannot find the path specified

Now if I open a CMD window and type in the command with the PC's name instead of $pcname the program works with no problem but if in the script it doesn't.

edit: It isn't that I don't want to try SetACL. I was given this tool to use first so if I can get it to work then good. If not I will look at SetACL.

runwait(@comspec  "/c" & "C:\i386\REGPERM.EXE  /K HKEY_LOCAL_MACHINE\Software\bbb \\" & $pcname & "  /A:Users:F  /E")

Edited February 3, 2005 by tazdev

[Jos]

You are missing spaces around /c...

runwait(@comspec  " /c C:\i386\REGPERM.EXE  /K HKEY_LOCAL_MACHINE\Software\bbb \\" & $pcname & "  /A:Users:F  /E")

[tazdev]

You are missing spaces around /c...

runwait(@comspec  " /c C:\i386\REGPERM.EXE  /K HKEY_LOCAL_MACHINE\Software\bbb \\" & $pcname & "  /A:Users:F  /E")

<{POST_SNAPBACK}>

Oh my god

I am a moron!!!

Everyone, join in,

HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA

Edited February 3, 2005 by tazdev

[tazdev]

So with SetACL I would need to put:

SetACL.exe -on "hklm\software\bbb" -ot reg -actn ace

-ace "n:$pcname\users;p:full"

where bbb is the key under software and $pcname is the PCname if I want it to be local not domain?

Is it then:

edit:

RunWait (@comspec " /c " & 'c:\i386\SetACL.exe -on "\\" & $pcname & "hklm\software\bbb" -ot reg -actn ace -ace "n:' & $pcname & '\users;p:full"')

???

The regperm thing didn't work. Dunno why but oh well.

Edited February 3, 2005 by tazdev

[Jos]

aren't you are missing a backslash? :

"" & $pcname & "\hklm\software\bbb"

Edited February 3, 2005 by JdeB

[SlimShady]

This should work.

If it doesn't check the documentation from the program.

It could be that you need to put 2 backslashes in front of the last $pcname

RunWait(@comspec ' /c c:\i386\SetACL.exe -on \\' & $pcname & '\hklm\software\bbb -ot reg -actn ace -ace "n:' & $pcname & '\users;p:full"')

[tazdev]

Yep that worked.

[newchel]

One more method, using built in Windows utility "RegINI"

Manual - http://support.microsoft.com/kb/245031/en-us or use "regini /?" in console.

Code of script is very simple:

RunWait("regini " & @ScriptDir & "Permissions.txt")

Code of Permissions.txt is very simple too:

RegistryMachineSOFTWARE1CTradeWare [1 5 7 17]
RegistryMachineSOFTWARE1CTradeWareScanOPOS [1 5 7 17]

In this case the "RegistryMachineSOFTWARE1CTradeWare" equals HKLMSOFTWARE1CTradeWare

And numbers in "[]" is the following permissions:

1 - Administrators Full Access

5 - Creator Full Access

7 - World Full Access

17 - System Full Access

Edited October 4, 2012 by newchel

[BrewManNH]

Just an FYI, this thread is over 5 1/2 years old, please don't necropost to something this old. Thanks.