Mastering Windows PowerShell Scripting - Second Edition

Registry rights

Creating access control entries for registry keys follows exactly the same pattern as for filesystem rights. The rights are defined in the System.Security.AccessControl.RegistryRights enumeration.

PowerShell is able to list these rights, but the descriptions on MSDN are more useful:

https://msdn.microsoft.com/en-us/library/system.security.accesscontrol.registryrights(v=vs.110).aspx

A rule is created in the same way as the filesystem rule:

$ace = New-Object System.Security.AccessControl.RegistryAccessRule( 
    'DOMAIN\User',    # Identity reference 
    'FullControl',    # RegistryRights 
    'ContainerInherit, ObjectInherit',  # InheritanceFlags 
    'None',         # PropagationFlags 
    'Allow'         # ACE type (allow or deny) 
) 

The rule can be applied to a key (in ...