How To Take Full Permissions Control To Edit Protected Registry Keys

The Windows registry is a hassle to edit under normal circumstances, but sometimes you’ll encounter keys that are protected by the system.  When you try to edit a protected registry key, you’ll run into a few different errors, but they tell you that you lack permissions for making changes. However, since it is just a permissions issue we can get around this by granting your user account in Windows the correct permissions!  Read on to learn how.

How do I know the registry key is protected?

When trying to create a new entry within a protected Key you’ll see the following error:

Error Creating Key

Cannot create key: You do not have the requisite permissions to create a new key under <registry key name>.

windows registry editing error, cannot create key you do not have permissions

When you try to edit an entry, you’ll see this error:

Error Editing Value:

Cannot edit <entryname>: Error writing the value’s new contents.

cannot create registry key value, error writing new contentsa windows .reg file cannot be used if key is protected

When you are working with a premade .reg file, it won’t work.  If you run a .reg file to import new registry entries, you’ll encounter the following error:

Registry Editor

Cannot import <folder\file.reg>: Not all data was successfully written to the registry.  Some keys are open by the system or other processes.

registry editor error, cannot import registry key because of permissions or the keys are open by the system

How To Take Ownership & Full Control Of The Registry

If you are encountering the above errors, without a doubt, you’ve encountered a protected registry key.  Normally these keys are only open to modification by the System, but if you follow the steps below, you’ll learn how to make your user account a powerful registry editing demi-god.  Open up regedit and let’s get started!

Step 1

In regedit (Registry Editor) Right-Click the protected key in question.  From the context menu that appears, Select Permissions.

Tip: If you want, you could take control of the top tree of the registry.  In effect, you would have full control of the entire registry. However, this is not recommended for security purposes unless you plan on removing said permissions when you finish working.

access registry key permissions in windows 7 vista

Step 2

In the Permissions window that appears, Click Advanced.

advanced permissions window for registry in wnidows 7 vista

Step 3

Click the Owner tab and Select your username from the list.* Now Check the Replace owner box and Click Apply. (Yes! This is one of the few instances where the Apply button is actually useful!)

*If your username is not on this list Click Other users or groups and manually add it.

change windows 7 or vista ownership of registry key

Step 4

Click the Permissions tab and then the Add button.  In the Select User window Type your username into the white box and Press OK.

add a new user to the full permissions list in registry editor

Step 5

A new Permission Entry window should pop-up; just Check the Allow Full Control box and Click OK.

set your username to full control in registry editor for windows 7 or vista

Step 6

Back on the previous window, your username should be on the list with Permissions set to Full Control.  Now all that is left to do is to save and exit all open windows by Clicking OK a couple of times.

your user should appear on the list with full control, click ok to save changes to registry editor


You should now be able to edit any of the entries within the registry key that you just modified permissions for.  Don’t forget that if you want to maintain proper security protocol, after finishing you can go back in and Remove your user from the list of names with Full Control.  Have a groovy time editing the registry without restriction!



  1. Koutheir Attouchi  

    Be careful what you’re doing! You are making Windows more and more vulnerable to attacks!

    • Jorje Inglasies  

      Very true, this leaves protected registry files open to attack.

      But then again, after you have finished editing them it is very easy to undo your permissions as stated at the bottom the article.

      • Vadim Schmidt  

        Agreed. mrgroove should probably highlight that point so it sticks out a little more – Once you make the tweak you need, reverse the process to lock things back up again.

        Probably is Microsoft locked it up, there’s a reason!

    • Pawel  

      Besides it is not working.

      I can not set any permissions – every time I have “Access denied”

      And registry key stayed unchanged.

      • Fred G.  

        hi pawel! try running regedit as administrator (right click and hit run as administrator)

    • joe  

      however, the file lost ownership can’t be reset , as it can’t be see in the window, how to solve this?

      for example, i wrongly remove the security setting in the “security tab”(tab) of a file, no it would no any security setting as well any ownership etc under its tab, i want to reset the ownership of the file, how to do so

      takeown /F “full path of file with file extension” /A

      i saw a execute from google, but it didn’t work, as it turn out the file can’t access as it was used by some program

  2. Koutheir Attouchi  

    I recommend that, before editing the registry, one should start his computer in fail-safe mode, and make a restore point before starting edition of keys. This to allow for fault tolerance and to ensure minimal number of programs get started, and thus decrease vulnerabilities while doing critical tweeks…

    • Vadim Schmidt  

      I agree with the system restore point ANY TIME you make a tweak to the registry. I think the safe-mode is a bit overkill but a system restore point for sure.

  3. Rod Seed  

    Please Mr Groove could you tell us novices which key it is?

    Rod Seed

    • goLfie  

      This should work for any registry key.

  4. adel  

    thank you so much Mr. Groove for the article

    but I want some details about how to do it using Command prompt

    I need it bu commands ot like batch file;

    thank you again


  5. Maniatico  

    Thank you brother for you again I have not formatted my pc

    thank you very much

  6. irvan  

    i got message when i click apply button..

    “Unable to set new owner on usbstor Access is Denied”

  7. Jacob Harris  

    I tried taking full control and this came up, “unable to save permission changes on internet settings. Access is denied.” What do I do?

  8. Jerimiah  

    I did this exactly as you indicated but the same error message appears. I am trying to change a services “Start” value from 2 to 3. However, even after changing the owner (including replacing owner on subcontainers and objects) and setting permissions, the error message is
    Cannot edit Start: Error writing the value’s new contents.

    For what it’s worth, I am trying to change the service startup type for LEMSS Agent. I receive similar access denied error when trying to change the startup type through services.msc and even by attempting to disable through msconfig.

    Also, I am a local administrator to this Windows XP machine. I’ve tried logging off and back on and can see that the permissions are still saved, but I also still receive the same error message.

    Any thoughts?

  9. ben tumakaka  

    it’s an old fashion, but still i keep try it when ever I read on some blog about it, hopefully it’ll work out for me. but it didn’t work.
    it’s always returned: unable to save..etc.. Access denied. Even though I’m logged in using super admin account. you know, the one that you can enable it from cmd?

  10. ted mosby  

    i got an access denied when i tried to replace owner

  11. ted mosby  

    *i got an access denied when i tried to “replace owner” in step 3

    • Are you logged into Windows with an Administrator account? If not, you may need to run regedit as an administrator.

  12. John Zucker  

    This does not seem to be a working recipe, unfortunately.

    Step 3 states exactly what I wish to achieve. I select my username in the Owner tab for Advanced Security Settings for DesktopProtection. I use this account under the ‘Change owner to:’ pane. Having selected my name as the new owner of the item, I click ‘Apply’. This gives me a popup ‘Unable to set new owner on DesktopProtection. Access is denied.’

    There are very many articles, such as the current one, online about how to change protected registry keys. Unfortunately at this point I have not yet found one which genuinely works.

  13. Phil Lock  

    Thanks a million for that! I had the vbscript message after removing mcafee and even though I found the key I couldn’t change it – until I came here.

    Lifesaver :-D !!!

  14. Windows 7 HP Mini 110 User  

    It worked. Thank you!

  15. Dave  

    Step 3 – access denied!
    YES I ran as administrator.
    ACCESS DENIED for everything I try to do.

  16. Simon  

    I have the same issue with a small number of registry keys (all MS Office 2010 related). First noticed it when Office tried to install an update and kept failing with a 1406 error. When I manually checked the keys involved (running regedit as Admin) I could not get access using the method described above, or any other. I’m thinking some sort of hive corruption somewhere, but cannot identify where or how to fix it.

  17. Ramesh  

    Thanks for u r tips..Its very helpful…..

  18. Ucupduyeh  

    tks dude

  19. asnowfall  

    Thanks this worked in Win7 Ultimate

  20. Hans  

    I want to delete the following : HKEY_CLASSES_ROOT\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66
    My name is on the permission list.
    However when trying to delete that entry, I get the message : error when deleting that key.
    what is wrong ?
    thanks for help

  21. Abhinav  

    please tell how to do this on windows 8

  22. Mr V-Guard  

    You need to start asking yourselves who’s computer is it !

    I am in regedit as administrator and cannot take ownership of a key node so that i can remove Microsoft spying on every thing I do and that includes in depth details about every device you have ever plugged in to your USB port.

    I tried to get around this “We won’t let you do it” by using some C# code after backing up the registry and as soon as the code hit the break-point I had set windows threw up an error message outside the visual studio debugger and soon after that the computer went bang and windows would not let me import my saved copy of the registry so I took a day rebuilding the darn machine.

    Microsoft is doing all it can to hide details about the registry and often uses keys ten levels deep to stop anyone spotting just how much privacy is being broken but I have written code that audits all the changes to the registry using SHA1 on value/data and then saving the results in an XML file and I can tell you now that windows seven even on a rebuild has over 400,000 keys and holds something like 3,000,000 bits of data.

    Nope I don’t trust Microsoft and its dirty tactics and was they to spend half as much time fixing windows as they do at auditing our every move for the NSA then windows would not keep blowing up as it does now.

  23. Carmen  

    Thank you, this allowed me to change a third-party software key that for some stupid reason kept reverting back to its original value!!!!

  24. Jay Reaper  

    Gotta admit, I find it pretty amusing when people say that Groove is making Windows less safe. If Microsoft would get their crap together and allow users to fix problems on their PC without compromising their security (something that Microsoft, since it’s founding, still gets a giant ‘F’ grade on), then people wouldn’t have to post helpful and, sometimes, necessary information that may also be harmful when used inappropriately.

    Ah Microsoft…one day you’ll be decent.

  25. Harry  

    That “thanks for visiting my site” ad for subscription is most annoying. :-)

    At the end of the day no one solved the access denied issue that several people complained about even when running as a local administrator.

  26. sheshank  

    hello i cannot find Owner tab in advanced Security Settings

  27. Ali  

    Thanks! Worked perfectly. I would recommend to undo this once your done editting your registry so that you’re not prone to security issues later on…

  28. Rey  

    i need complet path for signature update,in registry editor

  29. Subash  

    Thanks for your help. Its working.

  30. Michael Baeta  

    Cood day, its not working and the same error is rising, what i can do???

    • nirzec  

      Dear @michaelBaeta,

      Do the same process, but one.

      Instead of typing in your account’s name type : “Everyone”.

      Also ensure that you give it “Full Control” access too.


  31. nirzec  


    I appreciate your contribution.

    Many thanks, as your post helped me.


  32. VB007  

    when i edit it and press ok…it says cannot edit…access denied

    • Mohamed Rashed  

      me too

  33. Naveen Kumar  

    Thanks, it was a real helpful peace of information, straight to the point. ! thank u!

  34. Punda  

    It says “Unable to set new owner on update” and “Access is denied”

  35. DoneReady  

    This recipe doesn’t work for windows 10, I’ve been on it for hours still no solution……

  36. Doug Radzanowski  

    You know, I just feel I need to respond in defense of this post.
    People are saying “this doesn’t work for anyone”. That’s simply not true. Multiple people have posted that it worked, and said thanks.
    Furthermore, many people have issues that are completely different and more complex than a simple “Access is denied” issue.
    Also, we’ve launched into a diatribe about how Microsoft is spying on everyone. There’s a middle ground here. Yes Windows X goes too far in their information gathering. But no, they don’t “get an F”. Some information is necessary to improve their OS. If you don’t know anything about the problems people are having, how do you fix them? Error logs, examples of code. These are necessary to improve.
    Finally, in addition to a full system restore point, you can also just backup the registry itself.
    Y’all need to keep calm and groove on.

  37. “unable to change owner on windows.access is denied”.Now what should I do about this?

  38. Don  

    I was trying to edit the registry on an old Windows Small Business Server 2003 and the DOS prompt, right click, run as administrator, regedit gave me the same lack of permission error (it even prevented me from backing up the registry key to the desktop or my documents before trying to make changes) . I tried several different things like verify I am logged in as administrator, check permissions etc with no success. I then tried to do the regedit without first right click run as administrator permission and then everything worked. Apparently the right click run as administrator is different than the login as administrator then run regedit normally.

  39. John  

    Thanks, very useful.

  40. Bertholdous  

    I did the steps, but I cannot remove or modify the key “[HKEY_LOCAL_MACHINE\SYSTEM\WPA\PosReady]” on windows XP, to not displays Updates POS Ready.

  41. Bertholdous  

    Hi. I cannot Delete or Modify the key: HKEY_LOCAL_MACHINE\SYSTEM\WPA\PosReady on Windows XP SP3.

    This was added executing the .reg file:
    Windows Registry Editor Version 5.00


    Please, I did something bad step??

  42. Don  

    Microsoft stopped supporting Windows XP a long time ago. There are plenty of other websites that show how to introduce hacks into the registry to try and get free support without having to bring this to the groovypost forums.

  43. I have an issues with a key that is owned by system. The only way I could change permissions was to edit the registry in SAFE mode. However, when rebooting I once again cannot edit the key even though I have permissions to now do so. I expect that when the system is running it is somehow protecting this key from being changed.

    It seems somewhat bizarre that a Microsoft product, MSSQL, cannot install correctly because it can not access the key!

  44. SupaVayza  

    thank you i pulled my scalp out trying to slide a DWORD key in,i’m a heavy registry tweaker i’ll disable this nonesense all together tired of my own computer dictating to me tired of all the security BS let the “hackers” log in into my computer and enjoy my 100 GB music collection

    • Gordon L Edwards  

      The instructions skips a few steps. When I try it, i do not get the menus show in the article.

  45. Paul Steel  

    In Windows 10 there is a change in the entries shown when Advanced is opened. Instead of an Owner tab, there is at the top the Owner, and a Change option. The given entery was TrustedInstaller. I changed it to my username, and did the Check Names procedure.
    This worked for me! However, after following the instructions to return the Owner to TrustedInstaller, which by the way, has full control, when I click ‘CheckNames”, it cannot find TrustedInstaller.
    I did delete the entries giving Full Control to my UserName.

    • Paul Steel  

      To return Owner to Trusted Installer, enter the object name as NT Service\TrustedInstaller, then click Check Names. TrustedInstaller should appear.

  46. Kevin Boone  

    Greetings. Thanks for the information. I now have a Windows 10 HP laptop. I also have two 6 and 7 yr old ACER laptops running Windows 7 both of which no longer will turn on, and I don’t know why — but that’s not the problem…lol. Each contains video files I don’t often watch, so I stored the computers 3 years ago when this happened several months apart knowing I’d have the time to deal with the issue later. I now have the time. I will follow your process for regaining the files — video ones in MP-4 (most in high-definition) and a Windows Movie Maker format (the name of which escapes me now). Are there any external drives you’d recommend which can handle 500 gigabytes of video which also allows me to archive files by category? T H A N K S !

    • Hi Kevin – great question. My suggestion, post your question in our community discussion forum – You will get much more action on that than in these comments.

  47. Karin  

    Everything worked for me regarding the change of ownership to my user and the full control permission to my user and I also checked the subkeys to be included in the ownership. However, I can still not change the dword value underneath. It’s within the Microsoft Windows Defender HKLM/Software key. Any clues?
    I did run REGEDIT both as administrator and with my regular user, but no difference in that.

Leave a Reply

Your email address will not be published. Required fields are marked *


To Top