There used to be the tool Regini.exe from the Windows 2000 Resource Kit to do this, but it is no longer supported by Microsoft. Reg.exe can't do it either.
Joe's post about SubInAcl is perfectly valid. I happen to prefer SetACL, which basically does the same things with a different command-line syntax. It's also available as an ActiveX control such that it's easy to call in scripts.