Many Reg keys missing permissions


  1. glatzfront
    Posts : 26
    Win7 Premium
       New #1

    Many Reg keys missing permissions


    Win7 Ultimate

    AccessEnum shows many registry keys without permissions, especially under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum,
    ControlSet001\Enum and ControlSet002\Enum. Also verified this manually. I was able to correct many but Enum permissions can't be changed (add Administrators with full control) with the right click, select permissions method, access denied!

    Administrators own the keys in question.

    Installed subinacl:

    Elevated CMD

    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum /grant=administrators=f

    C:\Program Files (x86)\Windows Resource Kits\Tools>subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum /grant=administrators=f
    SYSTEM\CurrentControlSet\Enum : new ace for builtin\administrators
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum - RegSetKeySecurity Error : 5 Access is denied.

    subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum /grant=administrators=f gives a list of many errors.

    Could someone please explain what I'm doing wrong?
    Last edited by glatzfront; 05 Jul 2012 at 17:08.
      My Computer
    Quote Quote

  3. glatzfront
    Posts : 26
    Win7 Premium
    Thread Starter
       New #2

    Bump
      My Computer
    Quote Quote

  4. glatzfront
    Posts : 26
    Win7 Premium
    Thread Starter
       New #3

    I want to add Administrators with full permissions to Enum and all sub keys. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\

    Installed SetACL.exe to Windows

    cd C:\Windows
    SetACL.exe -on "hklm\SYSTEM\ControlSet002\Enum" -ot reg -actn ace -ace "n:domain local\Administrators;p:full"

    SetACL finished with error(s):
    SetACL error message: The SID for a trustee could not be found

    Help
      My Computer
    Quote Quote

  6. OldMX
    Posts : 687
    Microsoft Windows 10 Professional / Windows 7 Professional
       New #4

    Leave registry alone, you'll end reinstalling windows in no time....
      My Computer
    Quote Quote

 

  Related Discussions
Hi there! I'm new to the forums so go easy on me :S. Recently my laptop has been acting oddly so I wanted to use sfc /scannow to see if it could fix up anything problematic I've performed the sfc /scannow in cmd as an admin and it came up with "Windows resource protection found some files but...
Problem with my system. Cannot update windows at all, cannot run sfc, found the servicing to be missing in registry. Trying to install it in some way, also missing all the sub keys in the compononet tab. Help! Getting an error code 8007000d as well as a
Hello, I have a computer that has a corrupt registry. SFC /SCANNOW will not run. Windows Update will not work, Error Code 80080005. I even took my computer to a professional, dispite being very good with computers. He came back with the same result I did, a complete re-install of Windows. If I...
Which partition should be active? The one with OS installed? I have already tried but still get BSOD. I have only one disk. I have 3 partitions (500 MB, 6000 MB, 925 GB). 1 and 3 are primary and 2 is recovery. Which one should I select? If I select partition 3 and make others inactive I...
Hi, I'm on Windows 7 64 and in the last few days I've been getting A LOT of errors (mainly installations) related to reg keys. A run of Process Monitor and Regedit shows that there are many registry keys where I "can't display owner", but I am logged in as an administrator, UAC is turned off and...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 20:33.
Find Us