Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There used to be the tool Regini.exe from the Windows 2000 Resource Kit to do this, but it is no longer supported by Microsoft. Reg.exe can't do it either.

Any ideas?

share|improve this question
up vote 4 down vote accepted

Joe's post about SubInAcl is perfectly valid. I happen to prefer SetACL, which basically does the same things with a different command-line syntax. It's also available as an ActiveX control such that it's easy to call in scripts.

share|improve this answer
I find that SubInAcl orders ACLs incorrectly at times. – Stein Åsmul Sep 18 '09 at 13:17

SubInAcl is your friend here.

share|improve this answer
I wonder when the " your friend" expression got started here. I've been using it for awhile now, and I'm seeing it in a lot more posts. – Evan Anderson Jun 19 '09 at 21:02
Think we need a new tag, is-your-friend, for those must-have utilities. – nray Jun 22 '09 at 18:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.