dlloyd
21st January 2009 16:19 UTC

AccessControl::SetOnRegKey Windows 2008 64 bit
I need to use the AccessControl plugin's SetOnRegKey function on a Windows 2008 64 bit system. I need to set permissions on HKLM Software\Xyz. When I ran my install, the permissions were not changed.

Thinking this could be a WOW6432 issue, I created a "Xyz" registry key under WOW6432 and ran my installer again. The permissions on HKLM Software\Wow6432\Xyz were changed.

Is there a way to tell AccessControl to turn off registry redirection?

I did use SetRegView 64 before calling AccessControl, however, that had no effect.

Dan

kichik
21st January 2009 18:48 UTC

The plug-in has to be updated it for it. It can use the internal alter_reg_view flag so SetRegView will affect it as well or it can add a flag.

dlloyd
26th January 2009 21:43 UTC

kichik thanks for the reply. I looked at the code for the AccessControl plugin and discovered that the SetNamedSecurityInfo api does not support changing 64 bit registry access from a 32 bit application. From the discussions I found, apparently Microsoft did not include a flag to make that api work on the 64 bit registry like they did for the registry api.

As best as I can tell, in order to accomplish this, the AccessControl plugin will have to use the SetRegKeySecurity api. Those changes are more than I can tackle.

Can you or anyone else recommend a script or program that will change the security of a registry key on 64 bit systems?

Dan

kichik
30th January 2009 17:28 UTC

RegSetKeySecurity indeed seems like what you'll be needing here.

SetACL might be able to pull this off.
http://setacl.sourceforge.net/

rijukk
23rd January 2012 05:18 UTC

I have same issue, did you found a way to resolve it?
Since I am not in C++; it is a different world for me to update AccessControl plug-in.

my thread: http://205.188.87.199/showthread.php?t=340774