subinacl problems for reg key permissions

Hi all,

I'm having trouble using subinacl, in that I can't get it to work!

Below I've included an example of the command I'm typing into the cmd window as well as the output from subinacl.

I'm trying to set permissions for a reg key, I've tried a few variations:
- using /keyreg and /subkeyreg
- providing the entire reg key ie: "hkey_local_machine\software\stephen" and "software\stephen" as I've seen these differences in various examples.
- In this example I've omitted the permissions part as I want to apply full permissions for the user for this test, but I've also tried /grant=machine_name\iusr_machine_name=F.

------------------------------------------------------------
C:\>subinacl /keyreg "hkey_local_machine\software" /grant=machine_name\iusr_machine_name

+keyreg hkey_local_machine\software
/grant=ecdb0219\iusr_ecdb0219

Elapsed Time: 00 00:00:00
Done: 0, Modified 0, Failed 0, Syntax errors 0
------------------------------------------------------------

To apply permission for a reg key to I have to set access for each part of the entire reg key, ie: for the example below do I have to set access rights for Key1, key2 and TheKey etc. or is it simply enough to set access rights on Thekey? I'm wondering if this is my problem?

> hklm\software\key1\key2\TheKey <

I can't understand what I'm doing wrong, as always any ideas/comments welcome!

Thanx in advance,

Stephen
.

StephenMcC
Tue Jun 22 06:00:02 CDT 2004

D'oh! - This should be:....
------------------------------------------------------------
C:\>subinacl /keyreg "hkey_local_machine\software" /grant=ecdb0219\iusr_ecdb0219

+keyreg hkey_local_machine\software
/grant=ecdb0219\iusr_ecdb0219

Elapsed Time: 00 00:00:00
Done: 0, Modified 0, Failed 0, Syntax errors 0
------------------------------------------------------------

....before someone picks up on my 'iusr_machine_name' typo!

I've also tried setting permissions on the entire reg key apart from the actual key I want to set: [hklm\software\key1\key2\TheKey], which has no affect, no surprised really! Still need some help (as always)!

Thanx!

-------

"StephenMcC" wrote:

> Hi all,
>
> I'm having trouble using subinacl, in that I can't get it to work!
>
> Below I've included an example of the command I'm typing into the cmd window as well as the output from subinacl.
>
> I'm trying to set permissions for a reg key, I've tried a few variations:
> - using /keyreg and /subkeyreg
> - providing the entire reg key ie: "hkey_local_machine\software\stephen" and "software\stephen" as I've seen these differences in various examples.
> - In this example I've omitted the permissions part as I want to apply full permissions for the user for this test, but I've also tried /grant=machine_name\iusr_machine_name=F.
>
> ------------------------------------------------------------
> C:\>subinacl /keyreg "hkey_local_machine\software" /grant=machine_name\iusr_machine_name
>
> +keyreg hkey_local_machine\software
> /grant=ecdb0219\iusr_ecdb0219
>
> Elapsed Time: 00 00:00:00
> Done: 0, Modified 0, Failed 0, Syntax errors 0
> ------------------------------------------------------------
>
> To apply permission for a reg key to I have to set access for each part of the entire reg key, ie: for the example below do I have to set access rights for Key1, key2 and TheKey etc. or is it simply enough to set access rights on Thekey? I'm wondering if this is my problem?
>
> > hklm\software\key1\key2\TheKey <
>
> I can't understand what I'm doing wrong, as always any ideas/comments welcome!
>
> Thanx in advance,
>
> Stephen
> .

StephenMcC
Wed Jun 23 06:11:01 CDT 2004

Ahhh....

Seem's there's an issue with Subinacl and Win2003 Server (which is the build I'm using), doesn't work for this OS - no errors - nattin!

Needed to download new version 5.2.3790.1180, from:
http://www.microsoft.com/downloads/details.aspx?familyid=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en

Worked a treat after update!!!

Stephen
.


"StephenMcC" wrote:

> D'oh! - This should be:....
> ------------------------------------------------------------
> C:\>subinacl /keyreg "hkey_local_machine\software" /grant=ecdb0219\iusr_ecdb0219
>
> +keyreg hkey_local_machine\software
> /grant=ecdb0219\iusr_ecdb0219
>
> Elapsed Time: 00 00:00:00
> Done: 0, Modified 0, Failed 0, Syntax errors 0
> ------------------------------------------------------------
>
> ....before someone picks up on my 'iusr_machine_name' typo!
>
> I've also tried setting permissions on the entire reg key apart from the actual key I want to set: [hklm\software\key1\key2\TheKey], which has no affect, no surprised really! Still need some help (as always)!
>
> Thanx!
>
> -------
>
> "StephenMcC" wrote:
>
> > Hi all,
> >
> > I'm having trouble using subinacl, in that I can't get it to work!
> >
> > Below I've included an example of the command I'm typing into the cmd window as well as the output from subinacl.
> >
> > I'm trying to set permissions for a reg key, I've tried a few variations:
> > - using /keyreg and /subkeyreg
> > - providing the entire reg key ie: "hkey_local_machine\software\stephen" and "software\stephen" as I've seen these differences in various examples.
> > - In this example I've omitted the permissions part as I want to apply full permissions for the user for this test, but I've also tried /grant=machine_name\iusr_machine_name=F.
> >
> > ------------------------------------------------------------
> > C:\>subinacl /keyreg "hkey_local_machine\software" /grant=machine_name\iusr_machine_name
> >
> > +keyreg hkey_local_machine\software
> > /grant=ecdb0219\iusr_ecdb0219
> >
> > Elapsed Time: 00 00:00:00
> > Done: 0, Modified 0, Failed 0, Syntax errors 0
> > ------------------------------------------------------------
> >
> > To apply permission for a reg key to I have to set access for each part of the entire reg key, ie: for the example below do I have to set access rights for Key1, key2 and TheKey etc. or is it simply enough to set access rights on Thekey? I'm wondering if this is my problem?
> >
> > > hklm\software\key1\key2\TheKey <
> >
> > I can't understand what I'm doing wrong, as always any ideas/comments welcome!
> >
> > Thanx in advance,
> >
> > Stephen
> > .