Problem with registry permissions

Hey Guys,

I faced a peculiar problem with all the client systems after transferring an existing local user profile (using TransWiz.exe) to a domain user. When I tried to install an application it wont let me install even with domain administrator privileges.

I monitored the activity of the registry using REGMON.EXE (Sysinternal Tool) while installing the application and regmon showed loads of Access Denied messages. I couldn't change the registry permission unless I login as a local user. The only way to solve this problem is to reset the registry permissions.

I did some google and had a chat with Giri and found out some DOS commands to reset the registry permissions.

Steps to reset the entire registry permissions to defaults:

1. Download and install SubInACL

2. Create a file named reset.cmd in C:\Program Files\Windows Resource
Kits\Tools folder.

3. Edit the regreset.cmd file with the following content.

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f
subinacl /subdirectories %SystemDrive% /grant=administrators=f

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f
subinacl /subdirectories %SystemDrive% /grant=system=f

4. Enter into CMD prompt.

5. Enter the following commands one at a time and click Enter.

cd "C:\Program Files\Windows Resource Kits\Tools"
regreset.cmd

6. This resetting process will run for 10 to 15 mins.

Note: Its not necessary to restart your system after this process.
Execution of regreset.cmd does not require administrator privileges.

Just thought that this information might be helpful to you all.