- Local time
- 1:18 PM
- Posts
- 147
- OS
- Windows 11 25H2 Pro Build 26200
SetObjectSecurity.exe which is described here: New & Updated Security Tools | Microsoft Community Hub is a powerful, and without great care, dangerous tool. It enables you to rewrite the security and ownership of pretty much any securable object. It expects to be provided with a complete SDDL descriptor, so it isn't remotely user friendly. You can generate such a descriptor using SysInternals accesscheck AccessChk - Sysinternals , so you can use it to fully restore security settings you've messed about with. You may also find Aaron Margosis's SddlHelp useful. https://github.com/AaronMargosis/SddlHelp
SetObjectSecurity.exe will invoke any privileges it needs so that you can set the security on objects that belong to TrustedInstaller. One straightforward usage is
which changes the owner of the key to Administrators without changing the DACL. At which point I'd suggest using PowerShell to make the permission changes you want.
I've tested it in Windows Sandbox (or use another VM), which is what you need to do before using it on a live machine.
SetObjectSecurity.exe will invoke any privileges it needs so that you can set the security on objects that belong to TrustedInstaller. One straightforward usage is
Code:
SetObjectSecurity.exe key HKCR\DesktopBackground\Shell\.SpotlightLearnMore O:BAI've tested it in Windows Sandbox (or use another VM), which is what you need to do before using it on a live machine.
My Computers
System One System Two
-
- OS
- Windows 11 25H2 Pro Build 26200
- Computer type
- PC/Desktop
- Manufacturer/Model
- MSI PRO ADL-U Cubi 5 (MS-B0A8)
- CPU
- i3-1215U
- Memory
- 8GB
- Monitor(s) Displays
- Sony 43" 4k TV
- Screen Resolution
- 3840x2160
- Hard Drives
- 250GB NVMe M.2 PCIe Gen 3 SSD
- PSU
- External 65W
- Case
- Mini PC
- Browser
- FireFox
- Antivirus
- MS
-
- Operating System
- Windows 11 Pro 25H2
- Computer type
- PC/Desktop
- Manufacturer/Model
- Dell Optiplex 3070 SFF
- CPU
- Intel i3-9100
- Memory
- 16GB DDR4
- Monitor(s) Displays
- Dell S2721
- Screen Resolution
- 3840 x 2160
- Hard Drives
- Samsung 500GB nvMe
- Case
- Dell small form factor
- Keyboard
- Cherry mechanical (Blue)
- Mouse
- Microsoft
- Antivirus
- MS Defender
