set registry permissions silently
Hi all, hope somebody help with a solution for me. Problem: machine with screwed up registry permissions. HKLM\software\classes\typelib\{guid}
HKLM\software\classes\AcroIEHelper.AcroIEHlprObj
HKLM\software\classes\clsid\{guid}
These have everyone:R in the ACL. I want to reset these to the default, silently, early in the installation sequence. The problem I'm getting with both secedit and setacl is they both throw errors, either because the process can't take ownership or because there is some syntax error. Here is an example using secedit,
Warning 2: The system cannot find the file specified.
Error enumerating info for machine\software\classes\acroiehelper.acroiehlprobj.1.
Configure machine\software\classes\clsid\{06849e9f-c8d7-4d59-b87d-784b7d6be0b3}.
Configure machine\software\classes\typelib\{5f226421-415d-408d-9a09-0dcd94e25b48}.
Configuration of Registry Keys was completed successfully.
The result is that SOMETHING is done, but the reg keys are still set at the same ACL. This is a highly frustrating problem, and I'm hoping that somebody has come up with an easy way. Thanks to all who have posted before, but I did not find anthing addressing my problem so far.
Thanks!
HKLM\software\classes\AcroIEHelper.AcroIEHlprObj
HKLM\software\classes\clsid\{guid}
These have everyone:R in the ACL. I want to reset these to the default, silently, early in the installation sequence. The problem I'm getting with both secedit and setacl is they both throw errors, either because the process can't take ownership or because there is some syntax error. Here is an example using secedit,
Warning 2: The system cannot find the file specified.
Error enumerating info for machine\software\classes\acroiehelper.acroiehlprobj.1.
Configure machine\software\classes\clsid\{06849e9f-c8d7-4d59-b87d-784b7d6be0b3}.
Configure machine\software\classes\typelib\{5f226421-415d-408d-9a09-0dcd94e25b48}.
Configuration of Registry Keys was completed successfully.
The result is that SOMETHING is done, but the reg keys are still set at the same ACL. This is a highly frustrating problem, and I'm hoping that somebody has come up with an easy way. Thanks to all who have posted before, but I did not find anthing addressing my problem so far.
Thanks!
0 Comments
[ + ] Show comments
Answers (2)
Please log in to answer
Posted by:
MicrosoftBob
16 years ago
I don't know if you've gotten past this yet, but have you tried regini?
http://support.microsoft.com/kb/237607
http://support.microsoft.com/kb/237607
Posted by:
aogilmor
16 years ago
Thanks for asking. Turns out I didn't need to change reg permissions in any case. And I never did get secedit to run silently from within the MSI as others have done. RegINI is something I haven't used yet either, but thanks for the tip - another tool in the belt. Although others will disagree, I still think using the LockPermissions table is fine as long as you remember that it replaces the ACLs on the files, registry keys or directories you're setting permissions on.
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.