Changing Registry Permissions on logon

[Kishiro]

Have any of you guys experience in changing Registry permissions with a script using "regini" or "RegDACL" or other utils?

What I would like to do on my unattended CD, is to remove the "full control" permission for all users from the following key "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\" and also disable the "Inherit from parent the permission entries that apply to child objects(..)" on the aformentioned key.

Do anyone know if it's possible to create a script that do this on the first logon?

Any help would be appreciated.

(For anyone who wonders what this do to the system, it forces the Start Menu and Favorites to always be alphabeticly sorted.)

[Raja]

SetAcl.exe will do the job.

Download:

http://sourceforge.net/project/showfiles.php?group_id=69165

Examples:

http://setacl.sourceforge.net/html/examples.html

[Kishiro]

Thanks Raja

I'll give it a spin and report back with my findings.