set registry permissions silently

Hi all, hope somebody help with a solution for me. Problem: machine with screwed up registry permissions. HKLM\software\classes\typelib\{guid}

These have everyone:R in the ACL. I want to reset these to the default, silently, early in the installation sequence. The problem I'm getting with both secedit and setacl is they both throw errors, either because the process can't take ownership or because there is some syntax error. Here is an example using secedit,

Warning 2: The system cannot find the file specified.
Error enumerating info for machine\software\classes\acroiehelper.acroiehlprobj.1.
Configure machine\software\classes\clsid\{06849e9f-c8d7-4d59-b87d-784b7d6be0b3}.
Configure machine\software\classes\typelib\{5f226421-415d-408d-9a09-0dcd94e25b48}.
Configuration of Registry Keys was completed successfully.

The result is that SOMETHING is done, but the reg keys are still set at the same ACL. This is a highly frustrating problem, and I'm hoping that somebody has come up with an easy way. Thanks to all who have posted before, but I did not find anthing addressing my problem so far.


0 Comments   [ + ] Show comments

Answers (2)

Posted by: MicrosoftBob 12 years ago
Blue Belt
I don't know if you've gotten past this yet, but have you tried regini?

Posted by: aogilmor 12 years ago
9th Degree Black Belt
Thanks for asking. Turns out I didn't need to change reg permissions in any case. And I never did get secedit to run silently from within the MSI as others have done. RegINI is something I haven't used yet either, but thanks for the tip - another tool in the belt. Although others will disagree, I still think using the LockPermissions table is fine as long as you remember that it replaces the ACLs on the files, registry keys or directories you're setting permissions on.
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ