Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account


Registry Permissions in Windows XP

- - - - -

  • Please log in to reply
No replies to this topic


  • Member
  • 4 posts
  • Joined 26-April 04
We need to give a group permissions in the registry (HKCR and below) and have been using Microsoft's SubinACL.exe utility to do it. While the docs say that SubinACL can apply multiple perms at once to files using the same logic on the registry (just add the extra perms to the command) doesn't seem to work.

The command is:

subinacl /keyreg HKEY_LOCAL_MACHINE\Software\Classes /grant=INTERACTIVE=F

With files the MS example is:

The task in this example is to grant Domain1\User1 the PACEs of Execute and Take Ownership on the file C:\Test.txt. Type the following at the command line:

subinacl /file C:\TEST.TXT /grant=domain1\user1=xo

but entering more than one perm after the /grant=GROUP= fails. I also tried running it multiple times but the perms were replaced.

Anyone been able to do this?


How to remove advertisement from MSFN

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users