How-To Geek

We have all seen the tweaks to registry for Vista and Windows 7 on several sites that in order for them to work we must set permissions on a Registry key. That is because the only Sid that has Full permissions is Trusted Installer
Example http://www.askvg.com/how-to-cu.....-explorer/
First before tampering with your registry make sure you back it up.
I use Mz Registry Backup 2.0 http://www.mztweak.com/mzregistrybackup.html
I am on 64 bit Se7en and this worked. It's your system so don't blame me.

Next we need an external small program setacl.exe
Homepage: http://setacl.sourceforge.net
Version: 2.1.2.0
Copyright: Helge Klein
License: GPL

Extract and use the SetACL 2.1.2\Command line version\x64 or Command line version\x86 whichever for your system.
Now what I will show here is how to set permissions on these 2 keys and then delete them
HKEY_CLASSES_ROOT\DesktopBackground\Shell\Display
HKEY_CLASSES_ROOT\DesktopBackground\Shell\Gadgets

Those are the right click on Desktop that you see 'Screen Resolution' and 'Gadgets'. I want to remove them cause I have added things I use daily like Add/Remove or Command prompt. Now once I set my screen resolution I won't be changing daily so I want to eliminate. I also don't use Gadgets cause I have a desktop wallpaper that changes and I'd rather see that if I am ever on the desktop which is rare :)

I am not sure if all this is needed but it works. I also have tried to get the recurse to work but haven't as of this exact minute but I never surrender
I create a setacl.cmd in same folder as my architecture x64.

Get everything in the code box
Replace Administrators with your language word for this. Like French is Administrateurs

setacl.cmd
REM ----------------------------------------------------------------
cd /d %~dp0
@ECHO OFF
Title Replacing permissions on HKEY_CLASSES_ROOT\DesktopBackground\Shell\Display

setacl.exe -on "hkcr\DesktopBackground\Shell\Gadgets" -ot reg -actn setowner -ownr "n:Administrators"
setacl.exe -on "hkcr\DesktopBackground\Shell\Gadgets" -ot reg -actn ace -ace "n:Administrators;p:full"
setacl.exe -on "hkcr\DesktopBackground\Shell\Gadgets\command" -ot reg -actn setowner -ownr "n:Administrators"
setacl.exe -on "hkcr\DesktopBackground\Shell\Gadgets\command" -ot reg -actn ace -ace "n:Administrators;p:full"
Pause
REG DELETE hkcr\DesktopBackground\Shell\Display /f
REG DELETE hkcr\DesktopBackground\Shell\Gadgets /f
Pause
Exit
REM ----------------------------------------------------------------

I add the Pause to see if it's successful
SetACL finished successfully.
INFO: Processing ACL of: <classes_root\DesktopBackground\Shell\Display>
SetACL finished successfully.
INFO: Processing ACL of: <classes_root\DesktopBackground\Shell\Gadgets>
and then the delete
The operation completed successfully.

Thats it. Right click your desktop and they are gone
This will work for registry keys also but you will have to change as needed.

On above change hkcr to HKCR instead

OK next part since I have learned to recurse which will come within one of the following. I also have figured out we don't need the 2 commands except in above and 1 other item

Remove “Favorites” from Windows 7 Explorer’s Navigation Pane

cd /d %~dp0
@ECHO OFF
Title Remove “Favorites” from Windows 7 Explorer’s Navigation Pane
ECHO http://www.askvg.com/how-to-re.....tion-pane/

Pause
Exit

No problem The Geek, I share what I figure out.
Mainly I don't like doing all that stuff manually when I can accomplish it with code or .cmd
Just don't look right with code brackets

Remove “Homegroup” from Windows 7 Explorer’s Navigation Pane
I have no use for this, yes there is a 2nd pc here but she stay's out of mine and and I do the same :)

cd /d %~dp0
@ECHO OFF
Title Remove “Homegroup” from Windows 7 Explorer’s Navigation Pane
ECHO http://www.askvg.com/how-to-re.....tion-pane/

Pause
Exit

Remove “Network” from Windows 7 Explorer’s Navigation Pane

cd /d %~dp0
@ECHO OFF
Title Remove “Network” from Windows 7 Explorer’s Navigation Pane
ECHO http://www.askvg.com/how-to-re.....tion-pane/

Pause
Exit

Anyone know about changing windows 7 x64 registry permissions from 32bit with SetACL?

I need to change "USERS" permissions on a registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update to full permissions. I am using the following command for that...

setacl.exe -on "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" -ot reg -actn ace -ace "n:Users;p:full"

However this does not change the permissions on the reg key.

Also tried adding Everyone with full access, not sure how to accomplish this, though this would be the best option, to add everyone with full permissions to that registry key.

Does anyone have any ideas? right from the command line would be great...

Kel