RegSecEdit v0.1 - Edit Registry Security
http://www.codeplex.com/regsecedit/
Usage Example: Add permissions to registry sub tree node for ASPNET user. Include all permissions except Delete. Registry sub node is in Machine branch.
regsecedit -u:ASPNET -p:Software\MyAppRegistrySettings -b:Machine -i:1 -a:0 -r:
983103 -e:65536
Mandatory parameters:
-? Help
-p: Path to key (e.g. SOFTWARE\appname\myvalues)
-b: Main Branch.
Values:
Machine
User
-u: User (e.g. ASPNET)
-a: Access Control Type
HelpLink: http://goo.gl/aZPdI
Values:
Deny = 1
Allow = 0
-r: Permission
HelpLink: http://goo.gl/ZXwGp
Values:
QueryValues = 1
SetValue = 2
CreateSubKey = 4
EnumerateSubKeys = 8
Notify = 16
CreateLink = 32
Delete = 65536
ReadPermissions = 131072
WriteKey = 131078
ExecuteKey = 131097
ReadKey = 131097
ChangePermissions = 262144
TakeOwnership = 524288
FullControl = 983103
Optional parameters:
-i: InheritanceFlags
Default value: None
HelpLink: http://goo.gl/poEje
Values:
None = 0
ContainerInherit = 1
ObjectInherit = 2
-o: PropagationFlags
Default value: None
HelpLink: http://goo.gl/d15xI
Values:
None = 0
NoPropagateInherit = 1
InheritOnly = 2
-e: Permission to exclude.
See -r: parameter for references.
Use same value set from -r: parameter
Use only when using FullControl in -r: parameter.