IT Management Suite

This article describes how to change registry permissions with RegDACL.exe using a Wise Script.

This Wise Script only changes permissions on 1 key, of course you can add as many as you want/need.

It changes the Read permissions to Full Control for the Users Group. You can change permissions for other Groups as well. To find the correct parameters, just type RegDALC.exe /? in a Command Prompt.

Step 1

RegDALC.exe doesn't come with Windows, so you'll need to copy it to the Users Machine. You can download RegDALC.exe since it's Freeware. You can download it from MyITforum. http://www.myitcommunity.com/articles/15/view.asp?id=2339

I am copying the file to the System32 folder, so we'll need to define a Variable.

• In the left pane, double click Set Variable.
• In the Variable field: type REGDACL_LOCAL (or whatever you like).
• In the New Value field: type C:\Windows\System32 (or the path to the folder of your choice).
• Click OK.

Click to view.

Step 2

I downloaded RegDACL.exe and copied it to my Wise Server (use your company's deployment server).

Now we have to copy the file to the User's workstation.

• In the left pane, double click Install File.
• In the Source Pathname field: type the UNC path to the file. In my case this is:

  \\wsp7sp3\Wise share Point\Packages\RegDacls\RegDACL.exe

• In the Destination Pathname field: type %REGDACL_LOCAL%\RegDACL.exe
• Click OK.

Click to view.

Step 3

We need to define yet another variable that will lead to the location of the RegDACL.exe on the workstation.

We'll only define the variable, since the value is going to placed in that variable in Step 4.

• In the left pane, double click Set Variable
• In the Variable field name: type REGDACL.
• Click OK.

Click to view.

Step 4

In this step we'll have the script search for the RegDACL.exe and place it in the variable created in Step 3.

• In the left pane, double click Search for File.
• In the File Name field: type RegDACL.exe.
• In the Variable Name field: type REGDACL.
• In the Return Type field: Select Return first file that matches.
• In the Drives to Search field: Select Local hard drives only.
• Click OK.

Click to view.

Step 5

In this step we'll create a variable that will convert the result for variable REGDACL to short filename.

• In the left pane, double click Set Variable.
• In the variable field: Select REGDACL.
• In the New Value field: type %REGDACL%.
• In the Operation field: Select Convert to short filename.
• Click OK.

Click to view.

Step 6

Now we'll execute RegDALC.exe to change User group permissions on the HKLM\Software\Application key from Read to Full Control.

• In the left pane, double click Execute Program.
• In the .EXE Path field: type cmd.exe.
• In the Command line field: type /c %REGDACL% "HKLM\Software\Application" /GGU:F.
• Select Wait for Program to Exit.
• Click OK.

Click to view.

Save script and test.

RegDACL Key Commands: (not all of them, this is part of it).

Click to view.