Modify registry access rights in command line
Hi everyone!
I am looking how to modify the Access list of a specific hive in the Windows registry to make my Tivoli Enterprise Console Client working correctly in my user without rights environment.
There is the hive :
HKEY_LOCAL_MACHINE - \Software\JavaSoft
I need to do in in a command line or in a vbs because I am deploying the application with SMS 2003.
Regards
I am looking how to modify the Access list of a specific hive in the Windows registry to make my Tivoli Enterprise Console Client working correctly in my user without rights environment.
There is the hive :
HKEY_LOCAL_MACHINE - \Software\JavaSoft
I need to do in in a command line or in a vbs because I am deploying the application with SMS 2003.
Regards
0 Comments
[ + ] Show comments
Answers (9)
Please log in to answer
Posted by:
zipsantro
16 years ago
To change a registry value or registry permissions from a command line or from a script, use the Regini.exe(WINDOWS\SYSTEM32) utility.
Cheers!
Cheers!
Posted by:
AngelD
16 years ago
SetACL.exe should also be sufficient.
http://www.helge.mynetcologne.de/setacl/
http://setacl.sourceforge.net/html/examples.html (Search for the "Registry" example)
http://www.helge.mynetcologne.de/setacl/
http://setacl.sourceforge.net/html/examples.html (Search for the "Registry" example)
Posted by:
jmpouliot
16 years ago
AngelD: How can I set the rights for "All users" with SetACL? Can I type only "All users"..?
Posted by:
anonymous_9363
16 years ago
You need to use the name of an actual user and/or group, thus 'Everyone', Users' or 'Domain Users' are all valid.
Posted by:
jmpouliot
16 years ago
ok thanks.
I see that if I want to grant permission for the registry, I need to do the following:
SetACL.exe \\servername\MACHINE\software /registry /grant S-1-1-0 /read /sid
How could I set the permission for the local machine on which I am deploying the script.
I tried setacle.exe hkey_local_machine\Software\abcd /registry /grant s-1-1-0 /write_owner /sid and it did not work.
I see that if I want to grant permission for the registry, I need to do the following:
SetACL.exe \\servername\MACHINE\software /registry /grant S-1-1-0 /read /sid
How could I set the permission for the local machine on which I am deploying the script.
I tried setacle.exe hkey_local_machine\Software\abcd /registry /grant s-1-1-0 /write_owner /sid and it did not work.
Posted by:
anonymous_9363
16 years ago
User: JohnDoe
Domain: MyDomain
Target: HKEY_LOCAL_MACHINE\Software\Microsoft\Policies
Required permission: Full Control (there are fewer registry permissions than for file system)
Domain: MyDomain
Target: HKEY_LOCAL_MACHINE\Software\Microsoft\Policies
Required permission: Full Control (there are fewer registry permissions than for file system)
SetACL.exe -on "HKEY_LOCAL_MACHINE\Software\Microsoft\Policies" -ot reg -actn ace -ace "n:MyDomain\JohnDoe;p:full"
Posted by:
jmpouliot
16 years ago
I used this one:
setacl.exe MACHINE\SOFTWARE\Microsoft /registry /grant S-1-1-0 /write_owner /sid
setacl.exe MACHINE\SOFTWARE\Microsoft /registry /grant S-1-1-0 /write_owner /sid
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.