Windows – Unable to modify registry as admin on Windows 2012

permissionswindowswindows-registrywindows-server-2012

On Windows 2012, I'm trying to change the AppIDFlags value in the registry key HKEY_CLASSES_ROOT\AppID\{E62A7A31-6025-408E-87F6-81AEB0DC9347} to allow interaction with the desktop as documented here: http://forums.arcgis.com/threads/69842-Debugging-your-SOE-on-Windows-8

However, even when running regedit.exe as administrator I'm not allowed to change the value or take ownership of the registry key. On saving the value it says:

Cannot edit AppIDFlags: Error writing the value's new contents.

When trying to take ownership of the key, I get this error:

Unable to set new owner on {E62A7A31-6025-408E-87F6-81AEB0DC9347}

Access is denied.

Why am I not allowed to make any changes to the registry as administrator?

Best Answer

Apparently some process was having a handle open to the registry key. After rebooting I was able to edit the value.

Related Solutions

Change computer desktop icon in Windows 2008 R2 to display computer name

There is always the Sysinternal's (now part of Microsoft) BgInfo:

It automatically displays relevant information about a Windows computer on the desktop's background, such as the computer name, IP address, service pack version, and more. You can edit any field as well as the font and background colors, and can place it in your startup folder so that it runs every boot, or even configure it to display as the background for the logon screen.

Update: To fix the problem of the desktop icon in W2k3 R2 as per Mouffette comments below based upon this TechNet thread:

Right click on the registry key in regedit, select permissions then in the advanced tab change the owner from TrustedInstaller to Administrators, hit apply then you are able to grant administrators full control over the key. At that point you can edit the LocalizedString and save then hit refresh on the desktop and it works!

Windows – Force ownership of folder structure without replacing other permissions – Windows Server 2008 R2 – takeown is erasing all other permissions

Ended up achieving what I wanted with Setacl. I wrote the following script which ripped through the entire folder structure and files, and gave ownership to the local Administrators group, then went through again and added a full control ACE for our IT domain group. It did this without replacing or removing the existing permissions/ACEs (other than replacing the owner), and I didn't get any access denied errors:

setlocal

set logDir=%1
set targetDir=%2
set logFileName=%~n2
set logFileNameEnding=%3

SetACL.exe -on %targetDir% -ot file -actn setowner -ownr "n:S-1-5-32-544;s:y" -rec cont_obj -log "%logDir%\%logFileName%-TAKEOWN-%LogFileNameEnding%.txt" -silent

SetACL.exe -on %targetDir% -ot file -actn ace -ace "n:domain\group;p:full;s:n;m:set;w:dacl" -rec cont_obj -log "%logDir%\%logFileName%-ADD-DOMAIN-GROUP-%LogFileNameEnding%.txt" -silent

endlocal

Best Answer

Related Solutions

Change computer desktop icon in Windows 2008 R2 to display computer name

Windows – Force ownership of folder structure without replacing other permissions – Windows Server 2008 R2 – takeown is erasing all other permissions

Related Topic