Adding rights to registry on command line at windows

I needed to give all users rights to change some Internet Settings and right now normal user couldn’t change any needed settings.
I found tool called setacl which sounded right and started to use it.
You can found it :http://www.helge.mynetcologne.de/setacl/index.htm

This will give full right for everybody to registry branch /hklm/Software/Policies/microsoft/Windows/CurrentVersions/Internet Settings:

setacl.exe "\\%computername%\MACHINE\software\Policies\microsoft\Windows\CurrentVersion\Internet Settings" /registry /grant S-1-1-0 /full /sid

and after changes I wanted to remove those rights from everybody so I used this:
setacl.exe "\\%computername%\MACHINE\software\Policies\microsoft\Windows\CurrentVersion\Internet Settings" /registry /revoke S-1-1-0 /full /sid

As you probably noticed grant gives rights and remove takes them off.
I guess that you wondered what is that strange S-1-1-0 thing to who I gave those rights.
Here you can find “Well-known security identifiers in Windows operating systems” which you can use with setacl: http://support.microsoft.com/kb/243330.

You can do much much more with setacl.exe but I only needed to give rights to registry but if you want to know more about it check setacls website for more info =)