Applying permissions to keys without sids
Hello,
Their are a few HKLM keys that have only the "everyone" sid set to read only on a customers SOE. I have attempted to manually insert the administrators sid and apply permission, also inherit parent permissions, without success. Works on all keys except the ones I listed below.
Why I have posted this in this forum is: I need to install Adobe Reader 7.0.9 and it trys to write to the effect keys, which then fails due to permissions , even thought I am the administrator.
HKLM\SOFTWARE\Classes\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
HKLM\SOFTWARE\Classes\AcroIEHelper.AcroIEHlprObj
HKLM\SOFTWARE\Classes\AcroIEHelper.AcroIEHlprObj.1
HKLM\SOFTWARE\Classes\TypeLib\{5F226421-415D-408D-9A09-0DCD94E25B48}
Setacl syntax I have used to inherit the parent permissions
setacl.exe -on "HKLM\Software\classes" -ot reg -actn rstchldrn -rst "dacl,sacl" -actn ace -ace "n:administrators;p:Full"
any assistance would be appreciated
Their are a few HKLM keys that have only the "everyone" sid set to read only on a customers SOE. I have attempted to manually insert the administrators sid and apply permission, also inherit parent permissions, without success. Works on all keys except the ones I listed below.
Why I have posted this in this forum is: I need to install Adobe Reader 7.0.9 and it trys to write to the effect keys, which then fails due to permissions , even thought I am the administrator.
HKLM\SOFTWARE\Classes\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
HKLM\SOFTWARE\Classes\AcroIEHelper.AcroIEHlprObj
HKLM\SOFTWARE\Classes\AcroIEHelper.AcroIEHlprObj.1
HKLM\SOFTWARE\Classes\TypeLib\{5F226421-415D-408D-9A09-0DCD94E25B48}
Setacl syntax I have used to inherit the parent permissions
setacl.exe -on "HKLM\Software\classes" -ot reg -actn rstchldrn -rst "dacl,sacl" -actn ace -ace "n:administrators;p:Full"
any assistance would be appreciated
0 Comments
[ + ] Show comments
Answers (1)
Please log in to answer
Posted by:
yarborg
17 years ago
Here is the command line I use for a similar problem. There are some small syntax differences but it sets permissions on the specified key and subkeys.
setacl.exe -on "HKEY_LOCAL_MACHINE\SOFTWARE\Classes" -ot reg -actn ace -ace "n:ADMINISTRATORS;p:full"
setacl.exe -on "HKEY_LOCAL_MACHINE\SOFTWARE\Classes" -ot reg -actn ace -ace "n:ADMINISTRATORS;p:full"
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.
