I am in need of a method to export XP registry ACL values. I have tried to acomplish this using a variety of registry tools such as reg.exe, regdmp.exe, etc...

but no joy.

I know I can import ACL permissions using regini but I want to be able to see the original settings before I overwrite them.

Any advice would be very appreciated.

One post is enough, thanks!

try SubInAcl

(for options read the doc, there are just 2 many to explain here)

gr /\/\o\/\/

SubInAcl is a somewhat complex tool... but this seems to show the PACE's for a regkey:

subinacl /output="c:\documents and settings\%username%\Desktop\out.txt" /keyreg HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder

Simply replace the regkey use above, for the one you want to check the values for.

You would use /subkeyreg if you wanted to find out the permissions on a subkey.

The out put is something similar to this:

=======================================================================================
+KeyReg HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder
=======================================================================================
/control=0x0 
/owner             =mjollnir\neophyte
/primary group     =mjollnir\none
/audit ace count   =0
/perm. ace count   =3
/pace =builtin\administrators  ACCESS_ALLOWED_ACE_TYPE-0x0
	CONTAINER_INHERIT_ACE-0x2      
    Key and SubKey - Type of Access:
	Read
    Detailed Access Flags :
	KEY_QUERY_VALUE-0x1        KEY_ENUMERATE_SUB_KEYS-0x8 KEY_NOTIFY-0x10            
	READ_CONTROL-0x20000       
/pace =everyone  ACCESS_ALLOWED_ACE_TYPE-0x0
	CONTAINER_INHERIT_ACE-0x2      
    Key and SubKey - Type of Access:
	Read
    Detailed Access Flags :
	KEY_QUERY_VALUE-0x1        KEY_ENUMERATE_SUB_KEYS-0x8 KEY_NOTIFY-0x10            
	READ_CONTROL-0x20000       
/pace =system  ACCESS_ALLOWED_ACE_TYPE-0x0
	CONTAINER_INHERIT_ACE-0x2      
    Key and SubKey - Type of Access:
	Full Control
    Detailed Access Flags :
	KEY_QUERY_VALUE-0x1        KEY_SET_VALUE-0x2          KEY_CREATE_SUB_KEY-0x4     
	KEY_ENUMERATE_SUB_KEYS-0x8 KEY_NOTIFY-0x10            KEY_CREATE_LINK-0x20       DELETE-0x10000             
	READ_CONTROL-0x20000       WRITE_DAC-0x40000          WRITE_OWNER-0x80000