&Inherited ACE can not be revoked here!4You can't change permissions while making a query!
Hint: No DACL exists for %s!'protection from inheritable permissions@Information: Protection from inheritable permissions is already Type RegDACL /? for help├Usage: RegDACL Key Commands
Key: [\\computer\]root[\subkey]
\\computer: remote machine
root: HKLM, HKU, HKCU, HKCC or HKCR
subkey: path to the key you want to change or query
Query Commands:
/L List DACL (show current permissions)
/E List Effective current permissions
/Qxx:perms(I) Query perms for xx (Does ACE with perms exist?)
/Axx:perms Are perms allowed for xx? (Does xx have perms effectively?)BThe next %d commands are available in the registered version only:| /Fxx:Perms(I) Find all subkeys with Perms for xx
/PI Find all protected subkeys (not available in NT 4)
ε Change Commands:
/Gxx:perms(I) Grant Access (add Perms to existing permissions) for xx
/Sxx:perms(I) Set Access (overwrite existing permissions with Perms) for xx
/Rxx Revoke Access (delete all ACEs for xx)
/Dxx:perms(I) Deny Access to Perms for xx
/PC Protect key and Copy formerly inherited permissions to it
/PR Protect key and Remove all formerly inherited permissions
/P- Remove Inheritance protection of this key /Propagate Propagate current DACL to all subkeys and remove explicitly
defined permissions from all subkeys
/Clear Clear noninherited ACEs (only allowed together with /S)
Important: all /P options are not available in NT 4!
Other Commands:<The next switch is available in the registered version only:KThe following 3 account types are available in the registered version only:]
possible options for Perms:
Q - Query value L - create Link
W - Write value D - Delete
C - Create subkey S - read Security info
E - Enumerate subkeys A - write dAcl
N - Notify changes O - write Owner
R - Read (same as QENS) F - Full access (same as QWCENLDSAO)
ä
Type "RegDACL /? | more" if your window is too small for this help screen.
Examples are available in the help file RegDACLe.htm