From: "Hrvoje Mesing" 

Maybe he could use subinacl.exe ?
That how he could skip decoding sddl.


-+-
M.


"Rich"  wrote in message news:45fb4ad8{at}w3.nls.net...
   You don't want the permissions on registry keys.  You want the ACL on the
service which is different.  The command to show this is "sc sdshow
schedule".    To interpret the results you have to decode SDDL.

Rich


"John Beckett"  wrote in message
news:9samv2pip10mr4tfm23vcharalpk2muhjo{at}4ax.com...
"Geo."  wrote in message
news::
> ALL of the service properties are greyed out.

Maybe Vista is using some new permissions feature, or maybe the GUI is
reflecting the permissions on the registry settings?? I see from RichG's
interesting link that Vista has many very interesting and worthwhile
features. Being able to us a domain account and not worry about password
changes is sensational.

To check if the GUI is showing the registry permissions: In regedit, look
at the service key that I mentioned earlier, right-click, Permissions.

John

--- BBBS/NT v4.01 Flag-5