Flickr Photos

Young Red Fox
Red Fox eating rowan berries
Roe Deer
Leopard in the rain
Lion mum taking care of cubs
Male Lion
Lion Cubs Playing
Lazy Spotted Hyena
Female Lion
Golden Jackal

Adding rights to registry on command line at windows

I needed to give all users rights to change some Internet Settings and right now normal user couldn’t change any needed settings.
I found tool called setacl which sounded right and started to use it.
You can found it :

This will give full right for everybody to registry branch /hklm/Software/Policies/microsoft/Windows/CurrentVersions/Internet Settings:

setacl.exe "\\%computername%\MACHINE\software\Policies\microsoft\Windows\CurrentVersion\Internet Settings" /registry /grant S-1-1-0 /full /sid

and after changes I wanted to remove those rights from everybody so I used this:
setacl.exe "\\%computername%\MACHINE\software\Policies\microsoft\Windows\CurrentVersion\Internet Settings" /registry /revoke S-1-1-0 /full /sid

As you probably noticed grant gives rights and remove takes them off.
I guess that you wondered what is that strange S-1-1-0 thing to who I gave those rights.
Here you can find “Well-known security identifiers in Windows operating systems” which you can use with setacl:

You can do much much more with setacl.exe but I only needed to give rights to registry but if you want to know more about it check setacls website for more info =)

Leave a Reply

You can use these HTML tags

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>




This site uses Akismet to reduce spam. Learn how your comment data is processed.