The Windows registry is a hassle to edit under normal circumstances, but sometimes you’ll encounter keys that are protected by the system. When you try to edit a protected registry key you’ll run into a few different errors, but they generally tell you that you lack permissions for making changes. But, since it is just a permissions issue we can get around this by granting your user account in Windows the correct permissions! Read on to learn how…
How do I know the registry key is protected?
When trying to create a new entry within a protected Key you’ll see the following error:
Error Creating Key
Cannot create key: You do not have the requisite permissions to create a new key under <registry key name>.

When you try to edit a entry, you’ll see this error:
Error Editing Value:
Cannot edit <entryname>: Error writing the value’s new contents.


When you are working with a premade .reg file, it won’t work. If you run a .reg file to import new registry entries, you’ll encounter the following error:
Registry Editor
Cannot import <folder\file.reg> Not all data was successfully written to the registry. Some keys are open by the system or other processes.

How To Take Ownership & Full Control Of The Registry
If you are encountering the above errors, without a doubt you’ve encountered a protected registry key. Normally these keys are only open to modification by the System, but if you follow the steps below you’ll learn how to make your user account a poweful registry editing demi-god. Open up regedit and let’s get started!
Step 1
In regedit (Registry Editor) Right-Click the protected key in question. From the context menu that appears, Select Permissions…
Tip: If you want, you could take control of the top tree of the registry. In effect you would have full control of the entire registry, however this is not recommended for security purposes unless you plan on removing said permissions when you finish working.

Step 2
In the Permissions window that appears, Click Advanced.

Step 3
Click the Owner tab and Select your username from the list.* Now Check the Replace owner box and Click Apply. (Yes! This is one of the few instances where the Apply button is actually useful!)
*If your username is not on this list Click Other users or groups… and manually add it.

Step 4
Click the Permissions tab and then the Add… button. In the Select User window Type your username into the white box and Press OK.

Step 5
A new Permission Entry window should pop-up, just Check the Allow Full Control box and Click OK.

Step 6
Back on the previous window your username should be on the list with Permissions set to Full Control. Now all that is left to do is to save and exit all open windows by Clicking OK a couple times.

Done!
You should now be able to edit any of the entries within the registry key that you just modified permissions for. Don’t forget that if you want maintain proper security protocol, after you are done you can go back in and Remove your user from the list of names with Full Control. Have a groovy time editing the registry without restriction!

Be careful what you’re doing! You are making Windows more and more vulnerable to attacks!
Very true, this leaves protected registry files open to attack.
But then again, after you have finished editing them it is very easy to undo your permissions as stated at the bottom the article.
Agreed. mrgroove should probably highlight that point so it sticks out a little more – Once you make the tweak you need, reverse the process to lock things back up again.
Probably is Microsoft locked it up, there’s a reason!
I recommend that, before editing the registry, one should start his computer in fail-safe mode, and make a restore point before starting edition of keys. This to allow for fault tolerance and to ensure minimal number of programs get started, and thus decrease vulnerabilities while doing critical tweeks…
I agree with the system restore point ANY TIME you make a tweak to the registry. I think the safe-mode is a bit overkill but a system restore point for sure.
Please Mr Groove could you tell us novices which key it is?
Thanks
Rod Seed
This should work for any registry key.
thank you so much Mr. Groove for the article
but I want some details about how to do it using Command prompt
I need it bu commands ot like batch file;
thank you again
Adel
how do i do this on windows 8 i tried but got this https://fbcdn-sphotos-a.akamaihd.net/hphotos-ak-ash4/387845_268296639887067_100001201980648_801238_55568552_n.jpg
Thank you brother for you again I have not formatted my pc
thank you very much
i got message when i click apply button..
“Unable to set new owner on usbstor Access is Denied”
I tried taking full control and this came up, “unable to save permission changes on internet settings. Access is denied.” What do I do?
I did this exactly as you indicated but the same error message appears. I am trying to change a services “Start” value from 2 to 3. However, even after changing the owner (including replacing owner on subcontainers and objects) and setting permissions, the error message is
Cannot edit Start: Error writing the value’s new contents.
For what it’s worth, I am trying to change the service startup type for LEMSS Agent. I receive similar access denied error when trying to change the startup type through services.msc and even by attempting to disable through msconfig.
Also, I am a local administrator to this Windows XP machine. I’ve tried logging off and back on and can see that the permissions are still saved, but I also still receive the same error message.
Any thoughts?
it’s an old fashion, but still i keep try it when ever I read on some blog about it, hopefully it’ll work out for me. but it didn’t work.
it’s always returned: unable to save..etc.. Access denied. Even though I’m logged in using super admin account. you know, the one that you can enable it from cmd?
i got an access denied when i tried to replace owner
*i got an access denied when i tried to “replace owner” in step 3
Are you logged into Windows with an Administrator account? If not, you may need to run regedit as an administrator.
This does not seem to be a working recipe, unfortunately.
Step 3 states exactly what I wish to achieve. I select my username in the Owner tab for Advanced Security Settings for DesktopProtection. I use this account under the ‘Change owner to:’ pane. Having selected my name as the new owner of the item, I click ‘Apply’. This gives me a popup ‘Unable to set new owner on DesktopProtection. Access is denied.’
There are very many articles, such as the current one, online about how to change protected registry keys. Unfortunately at this point I have not yet found one which genuinely works.
Have you tried to launch regedit as Admin?
Windows Key, regedit, shift-right click it and click run as administrator.
?
Sent from my Mobile
Yes, I have tried with run as an administrator. but it does not help.
Trying to fix the dropbox-issue in Windows 8 mentioned here: http://www.justanswer.com/software/65ks5-dropbox-unable-install-windows-laptop.html and here https://www.dropbox.com/help/272/en but I keep getting “Access is deined”
Thanks a million for that! I had the vbscript message after removing mcafee and even though I found the key I couldn’t change it – until I came here.
Lifesaver
!!!
It worked. Thank you!
Step 3 – access denied!
YES I ran as administrator.
ACCESS DENIED for everything I try to do.
I have the same issue with a small number of registry keys (all MS Office 2010 related). First noticed it when Office tried to install an update and kept failing with a 1406 error. When I manually checked the keys involved (running regedit as Admin) I could not get access using the method described above, or any other. I’m thinking some sort of hive corruption somewhere, but cannot identify where or how to fix it.
Thanks for u r tips..Its very helpful…..
tks dude
Thanks this worked in Win7 Ultimate