Registry Permissions in Windows XP

[PeteDOD]

*** cross posted from NT4/2000/2003 ***

We need to give a group permissions in the registry (HKCR and below) and have been using Microsoft's SubinACL.exe utility to do it. While the docs say that SubinACL can apply multiple perms at once to files using the same logic on the registry (just add the extra perms to the command) doesn't seem to work.

The command is:

subinacl /keyreg HKEY_LOCAL_MACHINE\Software\Classes /grant=INTERACTIVE=F

With files the MS example is:

==========================

The task in this example is to grant Domain1\User1 the PACEs of Execute and Take Ownership on the file C:\Test.txt. Type the following at the command line:

subinacl /file C:\TEST.TXT /grant=domain1\user1=xo

==========================

but entering more than one perm after the /grant=GROUP= fails. I also tried running it multiple times but the perms were replaced.

Anyone been able to do this?

Cheers

[SiMoNsAyS]

2. Use some common sense. Don't post your question under multiple topics. Think before posting and choose the right topic for you question or answer.

from msfn forum rules. dolly post.

sorry i can't help with your original problem

Edited October 15, 2004 by SiMoNsAyS

[PeteDOD]

The cross posting was because we use all 4 OS's and the answer is equally valid for all 4.