setting registry permissions

I can use subinacl.exe /keyreg
\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security
/grant=Administrators=F to change the permissions on my registry but it
does not propagate to the children of the registry key, any ideas how I
can get it to propagate to children?

JHP
Fri Oct 07 14:29:50 CDT 2005

This has not been tested... I've had occasion to experience multiple
instances of apps being run when using this approach - let me know - there
is always a work around:

** watch for word wrap **

Option Explicit

Dim strComputer, objReg, strKeyPath, arrSubKeys, subKey, objShell
Const HKEY_LOCAL_MACHINE = &H80000002
Const WindowStyle = 0
Const WaitOnReturn = True

strComputer = "."
Set objReg = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_
strComputer & "\root\default:StdRegProv")
strKeyPath = "SYSTEM\CurrentControlSet\Services\EventLog\Security"
objReg.EnumKey HKEY_LOCAL_MACHINE, strKeyPath, arrSubKeys
Set objShell = Wscript.CreateObject("WScript.Shell")

For Each subKey In arrSubKeys
objShell.Run "CMD /c SubInACL.exe /keyreg \HKEY_LOCAL_MACHINE\" &
strKeyPath &_
"\" & subkey & " /grant = Administrators = F", WindowStyle, WaitOnReturn
Next
Set objShell = Nothing
Set objReg = Nothing


"redhdkat" <redhdkat@excite.com> wrote in message
news:1128640576.104174.219280@z14g2000cwz.googlegroups.com...
>I can use subinacl.exe /keyreg
> \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security
> /grant=Administrators=F to change the permissions on my registry but it
> does not propagate to the children of the registry key, any ideas how I
> can get it to propagate to children?
>