\
Tips and Tricks
Tools
Security Related Tools
regperm.exe
A tool with source code by "Jeremy Parker" available at
"http://homepages.cae.wisc.edu/~micro/regperm/
".
Sets the permissions on registry keys in WinNT/2000
REGPERM [\\COMPNAME] /K REGKEY /A:<User>:<Permissions> /D:<User>:<Permissions>
/R /I /F /S /E /C /Q /?
Arguments
\\COMPNAME : Name of remote machine to set permissions on
/K REGKEY : Name of Key to apply permissions. If connecting to remote
machine, then only HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER
and their subkeys can be specified. If there is a space in
the name of the key, then it must be enclosed in double
quotes.
/S : Replaces DACL for registry key with that specified (Default)
/E : Edits the DACL for resigistry key
/A:<X>:<Y> : Allow access for user/group X with permissions Y
/D:<X>:<Y> : Deny access for user/group X with permissions Y
/R : Explicitly set DACLs on all child subkeys
/I : Turn on Inheritance for this key.
/F : Force subkeys to Inherit
/C : Continue on through recoverable errors
/Q : Quiet mode, don't display output messages
/? : Displays help message
/info : Displays Regperm version information
Permissions
Q - Query value L - create Link
W - Write value D - Delete
C - Create subkey S - read Security info
E - Enumerate subkeys A - write DACL
N - Notify changes O - write Owner
R - Read (same as QENS) F - Full access (same as QWCENLDSAO)
Remarks
When specifying a user or group for permissions, this program assumes
a single-word user/group name. If there are spaces in the name, then you
must enclose the name with double-quotes. Group names such as:
Administrators, Everyone, Power Users, etc... are valid although it is
possible in WinNT to create a local user account with the name matching
that of an existing group. In this case, the user account masks the group
account, leading to possibly undesired results.
Command line parameters specified later take precedence over those specified
earlier.