Windows – Change registry permissions via command line (batch file)

aclcommand linewindows 7windows-registry

I found an awesome Reg Hack for Windows 7, that renames the 'Computer' icon to something like %username% on %computername%. Unfortunately, in the tutorial, it says to change permissions of the registry key. I would like to change this from the command line, in a batch file, then add that tweak, then lock down that key again, all in one file. Is this possible? If so, how?

Best Answer

I found my way around another utility, SetACL. I pushed the file out to some systems, then ran the following commands remotely. They succeeded, and the icon changed on those systems after doing an F5 on the Desktop.

SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}" -ot reg -actn setowner -ownr n:Administrators
SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}" -ot reg -actn ace -ace "n:Administrators;p:full"
reg import computername.reg

Related Solutions

Windows – removing registry key with .reg file

Why are you putting "RUNDLL32.EXE C:\\Windows\\system32\\NvCpl.dll,NvStartup" in to the reg file? The documentation says that to remove a value you put a =- after the value name.

HKEY_LOCAL_MACHINE\Software\Test
"TestValue"=-

Windows – Does exporting a registry key in hive binary format preserve permissions and how can I import them to another machine

The textual .reg format does not support WinNT security features; it only preserves the data exported, as you can see by opening the .reg file with a text editor.

The "hive" format is identical to the one used by Windows to store the registry itself. This means that it supports all features used by registry, including security permissions and ownership. You can examine exported "hive" files by using "Load hive" in regedit or reg load in command line, and import into the main registry with reg restore.

However, remember that users on Windows are identified by their SIDs; local accounts will have different SIDs on different machines, so you may still have to adjust the imported permissions manually. (Builtin accounts such as "NT AUTHORITY\SYSTEM" have the same SID everywhere. Domain accounts always have the same SID on every domain member.)

Best Answer

Related Solutions

Windows – removing registry key with .reg file

Windows – Does exporting a registry key in hive binary format preserve permissions and how can I import them to another machine

Related Question