Hi, I was using subinacls.exe /subkeyreg "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /revoke="USERS" in Windows XP. Please tell me, How can I use the same registry with Icacls.exefor WindowsVista. Thanks in Advance, Regards, Asha

Hi Asha, is the post related to another one - restrict user from using regedit32.exe? If you want to prevent user from using regedit32.exe, you can install Windows SteadyState on the computer, select the user, then add regedit32.exe to block program list. You can download latest version of Windows SteadyState via the link: http://www.microsoft.com/downloads/details.aspx?familyid=D077A52D-93E9-4B02-BD95-9D770CCDB431&displaylang=en Hope this helps!

Hi Sean Zhu, Thank you for your reply. I want to do it through command line. Customer requested like that. Through script customer wants the registry to be restricted. Please tell me any command line tool to do the restriction in registry. Thanks in Advance, Regards, Asha.

Hi Asha, I'd like to inform you that icacls cannot be used on registry entry. If you want to set permission on registry keys, we can use regini. For detailed information, please check the following KB article: How to Use Regini.exe to Set Permissions on Registry Keys http://support.microsoft.com/kb/237607

Thank you for your reply. As I said, I want to restrict a particular registry hive. I want to deny permission for users to that specific registry hive. With regini.exe, how can we restrict a registry key.We can add permission or modify permission to a registry using Dword value, by giving specific permission to the administrator, system... But I want to deny users from accessing it. How can I perform that with regini.exe? Please let me know the solution if you have. Inputs will be valuable. Thanks in Advance, Regards, Asha

In windows vista, you can restrict winlogon registry key through regini.exe command. Hope this info would help u to address you requirement Thanks Dhana

Hi Asha, we can use the command with suffix to give certain user group read permission instead of write permission.

Hi Sean Zhu, I dont want to give read or write permission. I want to deny permission. Regards, Asha

Hi Asha, have you checked the following thread: http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3986153&SiteID=17 Does this work for you?

Hi Sean Zhu, I only raised that post. For the exe, yes what the answer given was applicable. But for the registry, it is not applicable. For registry key how we need to do. I am trying in all ways,please suggest any other tool if available. Or shall we use Subinacl.exe? but i read insome forum it is not supported in vista. Thats why I am very much worried. Otherwise I will be using the same subinacl.exe for registry editing in vista. Thanks in Advance, Regards, Asha