{"id":1505,"date":"2015-08-28T15:15:15","date_gmt":"2015-08-28T09:45:15","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=1505"},"modified":"2020-11-24T02:27:47","modified_gmt":"2020-11-24T02:27:47","slug":"how-to-take-ownership-of-registry-keys-and-assign-full-permissions","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/how-to-take-ownership-of-registry-keys-and-assign-full-permissions\/","title":{"rendered":"Take Ownership of a Registry Key And Assign Full Permissions"},"content":{"rendered":"<p>Certain areas of the Windows registry cannot be accessed due to the Permissions assigned (or lack thereof) for those keys. For instance, some registry keys are owned by the <a href=\"https:\/\/www.winhelponline.com\/blog\/run-program-as-system-localsystem-account-windows\/\">LocalSystem<\/a> account, and some are owned by <a href=\"https:\/\/www.winhelponline.com\/blog\/run-program-as-trustedinstaller-locked-registry-keys-files\/\">TrustedInstaller<\/a>.<\/p>\n<p>There are legitimate cases where you need to access a registry key to modify or retrieve a setting, and receive <i>Access is Denied<\/i> or similar errors when doing so. Some of the errors you may encounter are:<\/p>\n<div class=\"err\">\n<p><strong>Error Creating Key<\/strong><\/p>\n<p>&lt;key name&gt; cannot be opened. An error is preventing this key from being opened.<br \/>\nDetails: Access is denied.<\/p>\n<p>Cannot create key: You do not have the requisite permissions to create a new key under &lt;key name&gt;.<\/p>\n<\/div>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2009\/10\/reg-key-error-delete.png\" width=\"352\" height=\"125\" \/><\/p>\n<p>When dealing with a Malware infested PC, you may have to delete several registry entries manually in case the cleanup tool you use does not remove all of them. In most cases, you would get an error (\u201cError Deleting Key\u201d) stating that you don\u2019t have the permission to delete the specified branch. In that case, additional steps are required to reset the registry ACL permissions before removing the key.<\/p>\n<p>To get access to a protected registry key, you have two options.<\/p>\n<ul>\n<li><strong>Option 1<\/strong> is to run the <a href=\"https:\/\/www.winhelponline.com\/blog\/run-program-as-system-localsystem-account-windows\/\">Registry Editor under SYSTEM<\/a> or <a href=\"https:\/\/www.winhelponline.com\/blog\/run-program-as-trustedinstaller-locked-registry-keys-files\/\">under TrustedInstaller<\/a> rights and change the necessary modifications in the registry.<\/li>\n<li><strong>Option 2<\/strong> would be to change or take ownership of that registry key and then assign full control (or the required) permissions for your user account.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-6338 alignleft\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2018\/07\/icotip.gif\" alt=\"tips bulb icon\" width=\"34\" height=\"34\" \/><strong>Option 1<\/strong> is preferred if you need to modify or delete a registry value or a key without changing the permission entries for that branch. <strong>Option 2<\/strong> is preferred especially if you need to add necessary permissions for your user account for a specific registry key.<\/p>\n<p>In this article, let&#8217;s see <strong>Option 2<\/strong> &#8212; changing the ownership of the registry keys and assigning full permissions for your user account. Here are the instructions to do that in any version of Windows.<\/p>\n<p><i>(The screenshots are from a Windows 10 computer, but the steps are exactly the same in Windows 8 and 8.1. In Windows Vista &amp; 7, there is a slight change in the permission dialog boxes, where ownership can be set by clicking the <\/i><strong><em>Owner<\/em><\/strong><i> tab in the Advanced Security dialog. Owner tab has been removed in Windows 8 and higher.)<\/i><\/p>\n<div class=\"rp\"><strong>RELATED:<\/strong> <a href=\"https:\/\/www.winhelponline.com\/blog\/take-ownership-registry-key-permissions-command-line-acl\/\">Take Ownership of Registry Key &amp; Assign Permissions Using Command-line<\/a><\/div>\n<h2>Take Ownership of a Registry Key<\/h2>\n<ol>\n<li>Open the Registry Editor by running <code>regedit.exe<\/code><\/li>\n<li>Navigate to the branch for which you want to modify the permissions.<\/li>\n<li>Right-click on the branch, and choose <strong>Permissions&#8230;<\/strong><br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-1.png\" width=\"359\" height=\"289\" \/><\/li>\n<li>Click the <b>Advanced<\/b> button.<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-2.png\" width=\"377\" height=\"457\" \/><\/li>\n<li>In the Advanced Security Settings dialog, note down the owner. If it says <i><b>Unable to display current owner<\/b><\/i>, or if your account isn&#8217;t the current owner, click <b>Change<\/b><br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-3.png\" width=\"472\" height=\"236\" \/><\/li>\n<li>Type your user account name and click OK.<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-4.png\" width=\"472\" height=\"259\" \/><\/li>\n<li>Your user account is showing up as the owner, but the change wouldn&#8217;t be applied until you click <strong>Apply<\/strong>.<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-5.png\" width=\"458\" height=\"289\" \/><\/li>\n<li>If you also want to take ownership of the <u>subkeys<\/u> under the selected branch, click <b>Replace owner on subcontainers and objects<\/b>, and then click Apply. Don&#8217;t close the dialog yet.\n<div class=\"newline\"><i>(If using Windows Vista or 7, click the Permissions tab in the Advanced Security Settings dialog, and follow the rest of the instructions. The dialog boxes would be different in Windows Vista &amp; 7 after Step 7, but it&#8217;s not that difficult to follow.)<\/i><\/div>\n<\/li>\n<\/ol>\n<h2>Assigning Full Control Permissions for your User Account<\/h2>\n<p>You&#8217;ve just changed the ownership of the key, but that&#8217;s not enough. You&#8217;ll need to assign necessary Permissions (usually, <b>Full Control<\/b>) to the specific branch in order to write to it.<\/p>\n<ol>\n<li>Click the <b>Add<\/b> button in the Advanced Security settings dialog.<\/li>\n<li>Click <b>Select a principal<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-6.png\" width=\"485\" height=\"316\" \/><br \/>\n<\/b><\/li>\n<li>Type in your user account name, and click <b>OK<\/b>.<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-8.png\" width=\"472\" height=\"259\" \/><\/li>\n<li>Click <b>Full Control<\/b> checkbox to enable it.<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-7.png\" width=\"485\" height=\"315\" \/><br \/>\nYou&#8217;ve now granted your user account Full Control permissions.<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/reg-own-9.png\" width=\"377\" height=\"457\" \/><\/li>\n<\/ol>\n<p>That&#8217;s it. Add as many entries as you need, such as for <b>Administrators<\/b>, <b>SYSTEM, <\/b>etc. as required.<\/p>\n<p><strong>RELATED:<\/strong> <a href=\"https:\/\/www.winhelponline.com\/blog\/take-ownership-registry-key-permissions-command-line-acl\/\">Take Ownership of Registry Key &amp; Assign Permissions Using Command-line<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Certain areas of the Windows registry cannot be accessed due to the Permissions assigned (or lack thereof) for those keys. For instance, some registry keys are owned by the LocalSystem account, and some are owned by TrustedInstaller. There are legitimate cases where you need to access a registry key to modify or retrieve a setting, &#8230; <a title=\"Take Ownership of a Registry Key And Assign Full Permissions\" class=\"read-more\" href=\"https:\/\/www.winhelponline.com\/blog\/how-to-take-ownership-of-registry-keys-and-assign-full-permissions\/\" aria-label=\"Read more about Take Ownership of a Registry Key And Assign Full Permissions\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[7],"tags":[441],"class_list":["post-1505","post","type-post","status-publish","format-standard","hentry","category-windows","tag-registry"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":19471,"url":"https:\/\/www.winhelponline.com\/blog\/cannot-import-reg-not-all-data-was-successfully\/","url_meta":{"origin":1505,"position":0},"title":"Cannot import .REG file; Not all data was successfully written to registry","author":"Ramesh","date":"October 22, 2020","format":false,"excerpt":"Sometimes, when applying the registry settings using a .reg file, you may get one of the following errors: Cannot import file.reg: Not all data was successfully written to the registry. Some keys are open by the system or other processes, or you have insufficient privileges to perform this operation. Cannot\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"cannot import .reg file - error accessing registry","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/reg-file-import-error-4.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/reg-file-import-error-4.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/reg-file-import-error-4.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/reg-file-import-error-4.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":31313,"url":"https:\/\/www.winhelponline.com\/blog\/windows-update-service-access-denied-startup-type\/","url_meta":{"origin":1505,"position":1},"title":"Windows Update Service &#8220;Access is Denied&#8221; When Changing Startup Type","author":"Ramesh","date":"December 27, 2022","format":false,"excerpt":"When you open the Services MMC and change the Windows Update service's startup type, the \"Access is denied\" error occurs after clicking Apply or OK. Cause The above error occurs due to tightened permissions for the Windows Update service's registry key(s). Resolution To resolve the issue, change ownership of the\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"wuauserv registry change ownership","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/12\/wuauserv-registry-ownership-change.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/12\/wuauserv-registry-ownership-change.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/12\/wuauserv-registry-ownership-change.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/12\/wuauserv-registry-ownership-change.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":1430,"url":"https:\/\/www.winhelponline.com\/blog\/fix-base-filtering-engine-service-startup-problems\/","url_meta":{"origin":1505,"position":2},"title":"How to Fix Base Filtering Engine Service Startup Problems","author":"Ramesh","date":"January 14, 2016","format":false,"excerpt":"The Base Filtering Engine (BFE) service is a crucial network component targeted by malware. If the BFE service doesn't start, many services, such as Windows Firewall, Routing, Remote Access, and others, fail to start. If the BFE service is missing from the Services MMC or the Action Center warns you\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"BFE service permissions fix - Services MMC","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/01\/bfe-permissions-10.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":10223,"url":"https:\/\/www.winhelponline.com\/blog\/take-ownership-registry-key-permissions-command-line-acl\/","url_meta":{"origin":1505,"position":3},"title":"Take Ownership of Registry Key &#038; Assign Permissions Using Command-line","author":"Ramesh","date":"July 7, 2019","format":false,"excerpt":"We've seen how to use the Registry Editor (regedit.exe) to change ownership of a registry key and subkeys. This article tells you how to change registry key ownership and grant permissions using the command-line. Windows has the takeown.exe and icacls.exe console utilities to change file\/folder ownership and permissions, but there\u2026","rel":"","context":"In &quot;Utilities&quot;","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"take ownership registry command-line - setacl trustedinstaller","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/take-ownership-registry-command-line-recursively.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/take-ownership-registry-command-line-recursively.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/take-ownership-registry-command-line-recursively.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":80331,"url":"https:\/\/www.winhelponline.com\/blog\/dps-service-error-5-access-denied\/","url_meta":{"origin":1505,"position":4},"title":"Diagnostic Policy Service Error 5 &#8211; Access is denied","author":"Ramesh","date":"February 26, 2026","format":false,"excerpt":"When you start the Diagnostic Policy Service in your Windows 10 or 11 system, the following error may occur: Windows could not start the Diagnostic Policy Service service on Local Computer: Error 5: Access is denied. When this occurs, the following entry is logged into the System event log. Log\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Diagnostic Policy Service error 5 - access is denied - fix permissions","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2026\/02\/dps-service-error-5-permissions-3.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":5810,"url":"https:\/\/www.winhelponline.com\/blog\/snipping-tool-error-snip-not-sent-sending-snip-email\/","url_meta":{"origin":1505,"position":5},"title":"Snipping Tool Error &#8220;The snip could not be sent&#8221; Sending Snip to Email","author":"Ramesh","date":"November 4, 2017","format":false,"excerpt":"After taking a screenshot using the Snipping Tool, when you attempt to send the snip to email by clicking on the Send Snip (email recipient) button on the toolbar, the following error messages appear: Either there is no default mail client or the current mail client cannot fulfill the messaging\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"snipping tool send mail error","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/snip-send-mail-error-2.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/1505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=1505"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/1505\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=1505"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=1505"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=1505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}