/build/static/layout/Breadcrumb_cap_w.png

Applying permissions to keys without sids

Hello,

Their are a few HKLM keys that have only the "everyone" sid set to read only on a customers SOE. I have attempted to manually insert the administrators sid and apply permission, also inherit parent permissions, without success. Works on all keys except the ones I listed below.
Why I have posted this in this forum is: I need to install Adobe Reader 7.0.9 and it trys to write to the effect keys, which then fails due to permissions , even thought I am the administrator.

HKLM\SOFTWARE\Classes\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
HKLM\SOFTWARE\Classes\AcroIEHelper.AcroIEHlprObj
HKLM\SOFTWARE\Classes\AcroIEHelper.AcroIEHlprObj.1
HKLM\SOFTWARE\Classes\TypeLib\{5F226421-415D-408D-9A09-0DCD94E25B48}

Setacl syntax I have used to inherit the parent permissions

setacl.exe -on "HKLM\Software\classes" -ot reg -actn rstchldrn -rst "dacl,sacl" -actn ace -ace "n:administrators;p:Full"

any assistance would be appreciated

0 Comments   [ + ] Show comments

Answers (1)

Posted by: yarborg 13 years ago
Blue Belt
0
Here is the command line I use for a similar problem. There are some small syntax differences but it sets permissions on the specified key and subkeys.

setacl.exe -on "HKEY_LOCAL_MACHINE\SOFTWARE\Classes" -ot reg -actn ace -ace "n:ADMINISTRATORS;p:full"
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ