Null-ify Windows-Registry Permissions

Posted at

While https://icompile.eladkarako.com/nullify-windows-ownership-and-permissions/ deals with changing the permissions and ownership of the Windows file-system,

You might want to null'ify the security of the Window registry as well,
for the same reason to change the permissions of the file-system to be more permissive,
if you're a admin-single-user, you might as well make sure you have full-control over
all the data in the registry.

Open your registry-editor, either registry or Registry-Workshop as admin.

right click HKEY_CLASSES_ROOT, select permissions, advanced,
go to Owner tab, click the button "Other users or groups",
write Everyone and click OK.
Check ON the checkbox that is saing Replace owner on subcontainers and objects.
Click OK, and then OK again, right-click again and enter permissions,
again - advanced, add those groups and users, with full control, to "this key and subkeys":
System, Restricted, Users, Everyone, Administrators, Elad (change it to your personal user on the machine).

Uncheck the checkbox "Include inheritable permissions from this object's parents" (click Add when a dialong will popup, if any)

Check ON the "Replace all child objects permissions with inheritable permissions from this object".

Click OK, wait, OK again to close the permission dialong and do the same for HKEY_CURRENT_USER, HKEY_LOCAL_MACHINE and HKEY_USERS. you can skip HKEY_CURRENT_CONFIG since it's a shortcut.

You now need to restart your computer and you might have issues with some services not running properly,
for example Base Filtering Engine, if it happens you need to go back to your registry editor and do that again (first taking ownership with "Everyone" again!). restart the computer again.

Here are some screenshots that can help.