zeeh3
30th July 2006 01:15 UTC

Permissions on registry keys help
How to set permissions on registry keys without using Regini.exe (http://support.microsoft.com/kb/237607/en-us) from Microsoft?

CancerFace
30th July 2006 01:58 UTC

You can use the Access Control plugin
CF

zeeh3
30th July 2006 12:25 UTC

Thanks a lot :)

zeeh3
30th July 2006 12:58 UTC

I still have some doubts. With regini.exe we can use combinations of these codes:

1 - Administrators Full Access
2 - Administrators Read Access
3 - Administrators Read and Write Access
4 - Administrators Read, Write and Delete Access
5 - Creator Full Access
6 - Creator Read and Write Access
7 - World Full Access
8 - World Read Access
9 - World Read and Write Access
10 - World Read, Write and Delete Access
11 - Power Users Full Access
12 - Power Users Read and Write Access
13 - Power Users Read, Write and Delete Access
14 - System Operators Full Access
15 - System Operators Read and Write Access
16 - System Operators Read, Write and Delete Access
17 - System Full Access
18 - System Read and Write Access
19 - System Read Access
20 - Administrators Read, Write and Execute Access
21 - Interactive User Full Access
22 - Interactive User Read and Write Access
23 - Interactive User Read, Write and Delete Access

For example, how should be <trustee> <permissions> for setting HKLM\Software\something using 2 + 8 + 19 from above?

kichik
30th July 2006 13:02 UTC

Why would you want to give read permission to administrator and system if you already gave it to the world? Simply give the Everyone group read permission.

If you do want those three groups to have read permission separately, simply revoke all permissions from the registry key and then grant those one by one.

zeeh3
30th July 2006 14:53 UTC

Thanks, kichik. It was only a random example.