Controlling Access to Registry Keys
Registry keys are permissioned by default and should not be modified without a thorough understanding of the impact of the modification. Registry keys are also added by applications and via configuration settings. Changing permissions on these keys may prevent applications from running.
Default Registry Permissions
Figure 5-27 displays registry permissions, and they are listed and described in Table 5-8. Alhough registry permission names are different from file permissions, they are similar in use. Two main permissions, Full Control and Read, are composed of special permissions. Special permissions can be explicitly assigned.