{"id":696,"date":"2011-03-18T14:23:42","date_gmt":"2011-03-18T14:23:42","guid":{"rendered":"http:\/\/www.kozeniauskas.com\/itblog\/?p=696"},"modified":"2011-05-26T10:51:52","modified_gmt":"2011-05-26T09:51:52","slug":"change-registry-permissions","status":"publish","type":"post","link":"https:\/\/www.kozeniauskas.com\/itblog\/2011\/03\/18\/change-registry-permissions\/","title":{"rendered":"Change registry permissions"},"content":{"rendered":"<p>So lets say you need to change registry permissions and give all domain users full rights to a specific key HKEY_LOCAL_MACHINE\\SOFTWARE\\My_App.<br \/>\nYou can use Group Policy but also you can use a batch file.\u00a0Batch file can be setup to run on system startup or you could push it with SCCM if you have it installed.<\/p>\n<p>To change registry permissions you can use regini.exe and it should be on every Windows host but I think there is a better and easier tool(well at least to me) and it is called <a href=\"http:\/\/helgeklein.com\/\">SetACL<\/a>. This tool can be used to manage not only registry permission but also File Permissions, Auditing etc.<br \/>\nFirst download SetACL and from the download package extract command line version as this is what will be used in the script to c:\\temp. There are 2 versions 32bit and 64bit, choose the one you need.<!--more--><br \/>\nNow you can type the command directly or\u00a0place it in batch file(replace the <em>&#8216;HKEY_LOCAL_MACHINE\\SOFTWARE\\My_App&#8217;\u00a0and &#8216;DOMAIN\\Domain Users&#8217; <\/em>with your own values):<br \/>\n<em>c:\\temp\\SetACL.exe -on &#8220;HKEY_LOCAL_MACHINE\\SOFTWARE\\My_App&#8221; -ot reg -actn ace -ace &#8220;n:DOMAIN\\Domain Users;p:full&#8221;<br \/>\n<\/em><br \/>\nRun\u00a0it and see if the permissions are changed.<br \/>\nIn SCCM\u00a0you\u00a0could\u00a0create advertising to run\u00a0 this line directly from SCCM without batch file.<\/p>\n<p>That&#8217;s it.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>So lets say you need to change registry permissions and give all domain users full rights to a specific key HKEY_LOCAL_MACHINE\\SOFTWARE\\My_App. You can use Group Policy but also you can use a batch file.\u00a0Batch file can be setup to run on system startup or you could push it with SCCM if you have it installed. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4,5],"tags":[365,364,219,223],"_links":{"self":[{"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/posts\/696"}],"collection":[{"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/comments?post=696"}],"version-history":[{"count":4,"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/posts\/696\/revisions"}],"predecessor-version":[{"id":756,"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/posts\/696\/revisions\/756"}],"wp:attachment":[{"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/media?parent=696"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/categories?post=696"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kozeniauskas.com\/itblog\/wp-json\/wp\/v2\/tags?post=696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}