RegSecEdit v0.1 - Edit Registry Security
http://www.codeplex.com/regsecedit/


Usage Example: Add permissions to registry sub tree node for ASPNET user. Include all permissions except Delete. Registry sub node is in Machine branch.

regsecedit -u:ASPNET -p:Software\MyAppRegistrySettings -b:Machine -i:1 -a:0 -r:
983103 -e:65536

Mandatory parameters:

-? Help

-p: Path to key (e.g. SOFTWARE\appname\myvalues)

-b: Main Branch.
Values:
Machine
User

-u: User (e.g. ASPNET)

-a: Access Control Type
HelpLink: http://goo.gl/aZPdI
Values:
Deny = 1
Allow = 0

-r: Permission
HelpLink: http://goo.gl/ZXwGp
Values:
QueryValues = 1
SetValue = 2
CreateSubKey = 4
EnumerateSubKeys = 8
Notify = 16
CreateLink = 32
Delete = 65536
ReadPermissions = 131072
WriteKey = 131078
ExecuteKey = 131097
ReadKey = 131097
ChangePermissions = 262144
TakeOwnership = 524288
FullControl = 983103

Optional parameters:

-i: InheritanceFlags
Default value: None
HelpLink: http://goo.gl/poEje
Values:
None = 0
ContainerInherit = 1
ObjectInherit = 2

-o: PropagationFlags
Default value: None
HelpLink: http://goo.gl/d15xI
Values:
None = 0
NoPropagateInherit = 1
InheritOnly = 2

-e: Permission to exclude.
See -r: parameter for references.

Use same value set from -r: parameter
Use only when using FullControl in -r: parameter.

Last edited May 15, 2011 at 1:18 AM by andrija11, version 6