Freigeben über

How to change Registry Permissions with RegIni.exe (VBScript)

  • Artikel

Hi all, welcome back,

Today I'll show how we can set the following permissions on a registry key with RegIni.exe and a VBScript:

- Creator Owner Full Control
- Users Full Control
- Power Users Full Control
- Administrators Full Control
- System Full Control

I will set the permissions here for testing purposes:

- HKEY_CLASSES_ROOT\AlejaCMaTypelib
- HKEY_LOCAL_MACHINE\Software\AlejaCMaCo\AlejaCMaApp

And for that I will need to create a special regini.exe script which will have the following contents:

  
HKEY_LOCAL_MACHINE\Software\Classes\AlejaCMaTypelib [1 5 7 11 17]
HKEY_LOCAL_MACHINE\Software\AlejaCMaCo\AlejaCMaApp [1 5 7 11 17]

Notes:
- With regini.exe I won't be able to set Users Full Control, but Everyone Full Control.
- HKEY_CLASSES_ROOT = HKEY_LOCAL_MACHINE\Software\Classes

See the following articles for details on the values used in the regini script:
- How to Use Regini.exe to Set Permissions on Registry Keys
- How to: Use a Script to Change Registry Permissions from the Command Line

And here you have the VBScript that will use regini.exe and its script:

 

 ' Create temp file with the script that regini.exe will use
'
set oFSO = CreateObject("Scripting.FileSystemObject")
strFileName = oFSO.GetTempName
set oFile = oFSO.CreateTextFile(strFileName)
oFile.WriteLine "HKEY_LOCAL_MACHINE\Software\Classes\AlejaCMaTypelib [1 5 7 11 17]"
oFile.WriteLine "HKEY_LOCAL_MACHINE\Software\AlejaCMaCo\AlejaCMaApp [1 5 7 11 17]"
oFile.Close

' Change registry permissions with regini.exe
'
set oShell = CreateObject("WScript.Shell")
oShell.Run "regini " & strFileName, 8, true

' Delete temp file
'
oFSO.DeleteFile strFileName

WScript.Echo "Done!"

 

I hope it helps.

Cheers,

 

Alex (Alejandro Campos Magencio)

Comments

  • Anonymous
    March 24, 2008
    How do you change registry keys through a batch file and regini?  For example, we'd like to have Vista auto-logon with a user name and password.  We could do it through XP, but it isn't working quite the same in Vista.  Any suggestions?

  • Anonymous
    March 24, 2008
    I've never used Regini.exe for anything but changing registry key permissions, but this link may help you:Distributing Registry Changeshttp://windowsitpro.com/Windows/Articles/ArticleID/20047/pg/4/4.htmlIn order to change registry key values, etc., I always use VBScript. See this sample for instance:How Can I Create a New Registry Key?http://www.microsoft.com/technet/scriptcenter/resources/qanda/nov06/hey1116.mspxI hope this helps.

  • Anonymous
    March 24, 2008
    Thank you very much for your useful help...!

  • Anonymous
    April 22, 2008
    Would you happen to know if there is a way to use regini or something similar to change permissions for a particular user?The ACL options for regini only shows default system users/groups.We need to change permissions on a bunch of keys for a special user that will be created and need to automate the permissions process (it would be annoying to have to manually set the permissions on 20+ keys at several machines...)Thanks!

  • Anonymous
    May 02, 2008
    SubInACL (SubInACL.exe) may help you:http://www.microsoft.com/downloads/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en

  • Anonymous
    May 02, 2008
    adssecurity.dll may help you, too:http://support.microsoft.com/kb/269159

  • Anonymous
    July 28, 2008
    The comment has been removed

  • Anonymous
    August 26, 2008
    I'm sorry Disk4mat. I have no sample for that. If you need help to create one please contact us, Microsoft Technical Support, and we will be more than happy to assist you.Cheers,Alex

  • Anonymous
    September 04, 2008
    Does anyone know how to reset a reg key's permissions back to "inherit from parent"?

  • Anonymous
    April 28, 2010
    How to change Registry Permissions with RegIni.exe (VBScript)

  • Anonymous
    May 04, 2010
    The comment has been removed

  • Anonymous
    January 23, 2014
    rem -  You  can do it with one batch file or cmd if you like...rem -  In Win7, 8, 8.1-svr 2008,2012@echo offtitle "Creating Registry Security for a tag...."@echo HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession ManagerEnvironment  [1 5 7 11 14 17 21] >%public%desktopfile.fil@regini /m \localhost %public%desktopfile.fil@del %public%desktopfile.filexitenjoy...

  • Anonymous
    September 15, 2014
    Can this be used to help keep Windows secure?Thanks,

  • Anonymous
    July 02, 2015
    But Regini is deleting the previous permissions existed and adding the permissions we gave.And also it is not appending those permissions to sub keys. Is there any extra options or other solution to give permissions to sub keys and also to append with the previous permissions instead of replacing them.

  • Anonymous
    July 02, 2015
    But Regini is deleting the previous permissions existed and adding the permissions we gave.And also it is not appending those permissions to sub keys. Is there any extra options or other solution to give permissions to sub keys and also to append with the previous permissions instead of replacing them.