Hi all, hope somebody help with a solution for me. Problem: machine with screwed up registry permissions. HKLM\software\classes\typelib\{guid}
HKLM\software\classes\AcroIEHelper.AcroIEHlprObj
HKLM\software\classes\clsid\{guid}

These have everyone:R in the ACL. I want to reset these to the default, silently, early in the installation sequence. The problem I'm getting with both secedit and setacl is they both throw errors, either because the process can't take ownership or because there is some syntax error. Here is an example using secedit,

Warning 2: The system cannot find the file specified.
Error enumerating info for machine\software\classes\acroiehelper.acroiehlprobj.1.
Configure machine\software\classes\clsid\{06849e9f-c8d7-4d59-b87d-784b7d6be0b3}.
Configure machine\software\classes\typelib\{5f226421-415d-408d-9a09-0dcd94e25b48}.
Configuration of Registry Keys was completed successfully.

The result is that SOMETHING is done, but the reg keys are still set at the same ACL. This is a highly frustrating problem, and I'm hoping that somebody has come up with an easy way. Thanks to all who have posted before, but I did not find anthing addressing my problem so far.

Thanks!
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
I don't know if you've gotten past this yet, but have you tried regini?

http://support.microsoft.com/kb/237607
Answered 03/25/2008 by: MicrosoftBob
Blue Belt

Please log in to comment
0
Thanks for asking. Turns out I didn't need to change reg permissions in any case. And I never did get secedit to run silently from within the MSI as others have done. RegINI is something I haven't used yet either, but thanks for the tip - another tool in the belt. Although others will disagree, I still think using the LockPermissions table is fine as long as you remember that it replaces the ACLs on the files, registry keys or directories you're setting permissions on.
Answered 03/25/2008 by: aogilmor
Ninth Degree Black Belt

Please log in to comment
Answer this question or Comment on this question for clarity