I'm trying to clean up a massive mistake for someone and part of the clean-up involves resetting registry permissions on about 50 servers. I looked into using regini for this, and it will get me about 70% there, but several of the changes are more fine-grained than regini allows.
subinacl seems like it would do the trick, but the documentation suggests (through it's lack of saying anything about it) that it cannot be run against remote registries. Is this the case?
If so, does anyone know of a built-in or Microsoft-provided (easiest to get approved for use) tool that will allow me to set registry permissions?
As an example, trying to set permissions for 'Users' is not covered by regini, nor is setting 'Power Users' to 'Read access' only.