Adding rights to registry on command line at windows

I needed to give all users rights to change some Internet Settings and right now normal user couldn’t change any needed settings.
I found tool called setacl which sounded right and started to use it.
You can found it :

This will give full right for everybody to registry branch /hklm/Software/Policies/microsoft/Windows/CurrentVersions/Internet Settings:

setacl.exe "\\%computername%\MACHINE\software\Policies\microsoft\Windows\CurrentVersion\Internet Settings" /registry /grant S-1-1-0 /full /sid

and after changes I wanted to remove those rights from everybody so I used this:
setacl.exe "\\%computername%\MACHINE\software\Policies\microsoft\Windows\CurrentVersion\Internet Settings" /registry /revoke S-1-1-0 /full /sid

As you probably noticed grant gives rights and remove takes them off.
I guess that you wondered what is that strange S-1-1-0 thing to who I gave those rights.
Here you can find “Well-known security identifiers in Windows operating systems” which you can use with setacl:

You can do much much more with setacl.exe but I only needed to give rights to registry but if you want to know more about it check setacls website for more info =)

Leave a Reply

You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>



This site uses Akismet to reduce spam. Learn how your comment data is processed.