Secedit permissions not applied

From: BlueBearr (bluebearr001@yahoo.com)
Date: 04/11/03 

From: bluebearr001@yahoo.com (BlueBearr)
Date: 11 Apr 2003 14:51:17 -0700

I am trying to change the permissions on the key
HKLM\System\CurrentControlSet\Enum and all subkeys. Currently, System
has full control, and "Allow inheritable permissions" is NOT set to
these keys. I am using an account that is in the local Administrators
group.

I have the following template:

--------------------------------------------------
[Unicode]
Unicode=yes
[Version]
signature="$CHICAGO$"
Revision=1
[Registry Values]
[Profile Description]
Description=Fix enum permissions
[Registry Keys]
"MACHINE\SYSTEM\CurrentControlSet",2,"D:AR(A;CI;KA;;;BA)(A;CI;KR;;;WD)"
--------------------------------------------------

Everything looks great, but when I run this command:

secedit /configure /db c:\temp\junk.sdb /cfg enum.inf /verbose

I get this in the log file:

[snip]
----Configure Registry Keys...
        Configure machine\system\currentcontrolset.
Warning 5: Access is denied.
         Error take ownership of
machine\system\currentcontrolset\Control\Class\[*some
GUID*]\Properties.
Warning 5: Access is denied.
[etc.]
[snip]

If I set the permissions using regedt32, everything works like a
champ. Subinacl works great too - <whine>but I want to use
secedit.</whine>

Any suggestions?

BlueBearr

Relevant Pages

  • Re: 0x80070005 / _Inventory: Installer returned 0x5 (5)
    ... |> Access Denied is a hard one to determine where the keys are failing - ... Navigate to the following key in the registry: ... and then click Permissions. ... |> For Administrator and System, select the Allow check boxes next to Full Control ...
    (microsoft.public.windowsupdate)
  • Re: 0x80070005 Installation Failure message
    ... I wonder why Microsoft ... it had different permissions than other ... Before you modify the registry, ... > one or more registry keys could not be deleted ...
    (microsoft.public.windowsupdate)
  • Re: Default permissions for OE inside registry key...
    ... Single users would not have those keys in the registry. ... > OE runs through the wizard to add a new news account. ... > so I need the permissions for the keys listed. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Problems creating keys under the HKEY_LOCAL_MACHINE in Windows XP
    ... into effect when describing NTFS file permissions... ... The registry operates in much the same way that NTFS ... those root keys. ... ADMINISTRATORS and AUTHENTICATED USERS. ...
    (microsoft.public.vb.winapi)
  • Re: Automatic Update: Access is Denied
    ... The same boot menu shows up when one presses F8 prior to Windows loading in order to reach Safe Mode. ... The final problem was that Windows Update was disabled... ... According to many web posts this is a permissions problem. ... Remove the check marks named values and Data (only Keys ...
    (microsoft.public.windowsupdate)