Many Reg keys missing permissions

[glatzfront]

Win7 Ultimate

AccessEnum shows many registry keys without permissions, especially under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum,
ControlSet001\Enum and ControlSet002\Enum. Also verified this manually. I was able to correct many but Enum permissions can't be changed (add Administrators with full control) with the right click, select permissions method, access denied!

Administrators own the keys in question.

Installed subinacl:

Elevated CMD

subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum /grant=administrators=f

C:\Program Files (x86)\Windows Resource Kits\Tools>subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum /grant=administrators=f
SYSTEM\CurrentControlSet\Enum : new ace for builtin\administrators
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum - RegSetKeySecurity Error : 5 Access is denied.

subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum /grant=administrators=f gives a list of many errors.

Could someone please explain what I'm doing wrong?

 

[glatzfront]

Bump

 

[glatzfront]

I want to add Administrators with full permissions to Enum and all sub keys. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\

Installed SetACL.exe to Windows

cd C:\Windows
SetACL.exe -on "hklm\SYSTEM\ControlSet002\Enum" -ot reg -actn ace -ace "n:domain local\Administrators;p:full"

SetACL finished with error(s):
SetACL error message: The SID for a trustee could not be found

Help

 

[OldMX]

Leave registry alone, you'll end reinstalling windows in no time....