将注册表访问规则添加到我无权访问但我是管理员的密钥

Question

I'm trying to add some access rules to registry key to which I've no rights, but I'm an administrator and using "Run as administrator" command at right mouse button menu.
Unfortunately exception is being thrown ( System.UnauthorizedAccessException ).
When running regedit.exe as administrator I can change rights to this key w/o any problems.
How to add any access rule to this key in my application?

RegistryKey root = Registry.LocalMachine.CreateSubKey(@"SOFTWARE\some_key", RegistryKeyPermissionCheck.ReadWriteSubTree);
RegistrySecurity security = new RegistrySecurity();
SecurityIdentifier sec = new SecurityIdentifier(WellKnownSidType.WorldSid, null);
RegistryAccessRule rule = new RegistryAccessRule(sec, RegistryRights.ReadKey | RegistryRights.QueryValues, InheritanceFlags.ContainerInherit | InheritanceFlags.ObjectInherit, PropagationFlags.InheritOnly, AccessControlType.Allow);
security.AddAccessRule(rule);
root.SetAccessControl(security);
root.Close();

Answer 1

I know this is an old thread, but I've encountered this problem before. I found that you need to first open the key with RegistryRights.ChangePermissions , then you can modify the access control.

Try opening the key like this:

    RegistryKey root = Registry.LocalMachine.CreateSubKey(@"SOFTWARE\some_key",
RegistryKeyPermissionCheck.ReadWriteSubTree, RegistryRights.ChangePermissions);

And then modifying the AccessControl rules.

Answer 2

I think you should use the GetAccessControl () method to get a RegistrySecurity object:

RegistryKey root = Registry.LocalMachine.CreateSubKey(@"SOFTWARE\some_key", RegistryKeyPermissionCheck.ReadWriteSubTree);
RegistrySecurity security = root.GetAccessControl();

You probably get the exception because you are trying to overwrite the security rules, instead of modifying them.

Answer 3

The documentation is pretty clear:

UnauthorizedAccessException : The current RegistryKey object represents a key with access control security, and the caller does not have RegistryRights.ChangePermissions rights.

See also the documentation for RegistryRights .