Set "deny" to a registry key via command line

[david.lynch]

Using a single console command line, we need to deny SYSTEM account access to a specific registry key.

Subinacl worked for that without issues on past operating systems, but it doesn't seem to behave properly with Windows 10 x64, and other sources are reporting the same.

SetACL doesn't seem to know anything about denying permissions on registry, or I couldn't find the proper syntax for it.

How you guys would recommend us to achieve this?
 

[jaclaz]

Subinacl OS support may depend on version , I believe "last" version is however very "old".

Have you tried Regini.exe? (if available in Windows 10)

BUT - hard as it may be to suggest this  - most probably you should use Powershell  (examples):

http://superuser.com/questions/914377/setting-registry-permissions-with-powershell

https://gallery.technet.microsoft.com/scriptcenter/How-to-Manage-Permissions-e5b32b49

jaclaz