I know I can modify the permissions on a reg key using REGINI, however, from my understanding, it replaces the current values rather than appends them. Can I use the utility to output the current permissions set so that I can modify just the portion I want to change and update it using REGINI? Is my understanding of the utility incorrect? Is there another method that can accomplish the same task that does not require the installation of a 3rd-party tool?
You could use REGDMP (from the Windows resource kit) to dump the current state.
Alternatively, you can use the Get-acl
and Set-acl
PowerShell commands.