🚀 go-pugleaf

Roland,

 > How can I change the privileges on the Registry for a particular user on a
 > WinNT4 Server/Workstation. I know how it can be done by RegEdt32 but how can
 > I do this by API.

To change the permissions on a reg key ("privileges" are something
different), use RegGetKeySecurity() to read the current DACL. Build an
ACE with the desired permissions for the user you have in mind. Search
the ACL for an already-existing entry for this user -- if there is one,
OR its permissions with the ones you want to add; if there is none, add
your ACE to the end of the list. (You may have to reallocate the ACL to
do that.) Finally, call RegSetKeySecurity() to write the DACL back.

The Platform SDK contains an overview section on security and such;
Marshall Brain's "Win32 System Services" discusses the topic, and so do
Brent/Rector in their "Win32 Programming" book. There are also a few
MSDN articles -- search titles for "security".

-- 

Cheers,

Felix.

If you post a reply, kindly refrain from emailing it, too.
Note to spammers: felixk@mvps.org is my real email address.
No anti-spam address here. Just one comment: IN YOUR FACE!