Permission using subinacl
Has anybody tried their hands on subinacl.exe to give permission to registry hive. I have this strange requirement asking me to make use of the above for granting permissions.
So , after reading some articles on web. i punched in the following on command line
subinacl.exe /subkeyreg HKEY_LOCAL_MACHINE\SOFTWARE\TestKey\NewTestKey /grant=Users=F.
but this command line doesn't set the permissions on regsitry hive I would really be very thankful, if someone can point me in the correct direction.
Answers (2)
have you tried using regini?
http://social.technet.microsoft.com/Forums/windows/en-US/d5da5921-6f18-4ba4-ba9e-0e8f77bfbd06/how-to-change-registry-permissions-from-command-line-in-windows-7?forum=w7itprogeneral
Comments:
-
yes, i have read about regini, but we have been strictly asked to used subinacl. any thoughts about how to use it, since after playing around with it, i found out, it applies permissions to only 32bit objects on 64bit OS - talonsprem87 11 years ago
I don't use SubInACL (I prefer SetACL or my own edited version of this DACLS script http://www.interrahost.com/scripts/dacl.vbs.txt) but reading this http://www.robvanderwoude.com/subinacl.php I'd venture that you need to surround the registry key in quotes.
Comments:
-
thanks for the link vbscab, even , i m shocked why some people rely on tools like subinacls which carry their own shortcomings on 64bit. I am very much skeptical, subinacl for some strange reason cant apply permissions to the 64 bit locations on a 64bit OS. So the possible solutions that i have in my mind is to make use of SetACL . I m still breaking my head to convince the other person to use SetACL for setting permissions - talonsprem87 11 years ago
-
just show them articles like this that it does not work with 64bit
http://social.technet.microsoft.com/Forums/sqlserver/en-US/63f7dd9b-e087-43e7-a362-0585d6459897/subinaclexe-not-working-with-64-bit-win7-os-registry-keys?forum=sqlsetupandupgrade - SMal.tmcc 11 years ago-
Yeah we had a big fight over mails.......it was hard job but we got it done. Thanks all for giving their time ..i know my questions some time are quite a thing, but this forum is all that i have - talonsprem87 10 years ago