Registry Permissions help

[Nick2010]

Hi..

i've recently installed a customized version of Windows 7 SP1. I removed some languages, added some programs, drivers, settings and a unattended script. It installed without issue and everything has been running fine. However, i've just noticed a potential major issue waiting to happen. When browsing some registry keys, I noticed that some keys had 'users' set to full control permissions. After delving a little deeper, it appeared that the entire hkcr and hklm brances were affected. I then tried changing the permissions for those keys so 'Users' only had read permissions, but it didn't change on all subkeys.

Is there any way I can change the rest of the subkeys without having to do them one by one? Would subinacl do the job:
subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=users=r
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=users=r

Also, can anyone think of what may have caused the problem? I've checked for malware, rootkits etc and all scans have come back clean.

As a test, I installed the modified installation image to a virtual machine and the same issue was present on the first boot so it seems the problem is happening somewhere between RT7 Lite and GImageX. Installing the unmodified image does not result in the issue.

I'd rather not start making a new disc all over again as besides this issue, everything is running ok. If I could just change these permissions en masse, that would be great.

Thanks for any help

 

[Nick2010]

SubInACL seems to have done the trick. It reported a few errors but as far as I can tell 'Users' only have read access to the keys and subkeys I have checked