Need help with registry permissions for .reg file

[Sulfurious]

I know what is happening. I have read up on how to do it from an unattended setup. I do not want to make any changes to the key I wish to add. I just want to allow the key to be written. If I do it by hand, changing the permissions, it works. But, that is not automation.

Key is HKLM\System\CurrentControlSet\Enum\Root -- this is a LEGACY_ entry. The services keys go in fine. I have tried it as admin or not, niether lets me add the key, either from .reg file or .inf file. Same in both xp and w2k.

Surely there must be some way to do this. I have read up on the inf section

[Copy.Files.Security]

"D:P(A;CI;GA;;;BA)(A;CI;GA;;;SY)"

but I am under the assumption that this is to set the security descriptor for the key I am adding. I wish to allow for writing, then set back to not allow.

Is there an INF pro here who can help me to understand what exactly is needed for this to work?

Should mention this is an install of an AV app. I do this to stop that troublsome Ikernel.exe issue that I continually have. Stripped the install away from InstallShield and made an .inf for it. Works great, except for the part where I have to add one last .reg/.inf entry by hand.

Later.

Sul

EDIT: Forgot to mention that while knowing how to do this with a .reg file would be helpful, I really want to know how to make the .inf work.

Edited August 17, 2006 by Sulfurious