Grant Read Write (Full Control) Permissions on Registry Keys (Fix Cannot Import and Access Denied Error in RegEdit)
Similar to system files and folders, some registry keys and values in system registry have been protected from accidental modification or deletion by end-user. Windows operating system restrict and lock some important registry keys by not granting write access right to standard user accounts, and even administrators. Instead, these protected registry keys are owned by System or TrustedInstaller, and has read-only permissions for end-user.
When a user doesn’t have permissions to modify, edit, create, add, change, delete or remove a registry key with Registry Editor (RegEdit.exe), one of the following error messages which denied permissions is displayed:
Error Creating Key
Cannot create key: You do not have the requisite permissions to create a new key under Registry Key.
Error Creating Value
Cannot create value: Error writing to the registry.
Error Renaming Key or Value
The Registry Editor cannot rename Registry Key or Value. Error while renaming key or value.
Error Editing Value
Cannot edit Registry Value. Error writing the value’s new contents.
Error Deleting Values
Unable to delete all specified values.
Error Deleting Key
Cannot delete Registry Key: Error while deleting key.
When a registry key is blocked from change, user also cannot run a .REG registry registration entries to merge the registry keys, values or value data to the system registry with the following permission denied error message:
Cannot import RegistrationEntries.reg. Not all data was successfully written to the registry. Some keys are open by the system or other process.
In order to take ownership and grant full control (read and write) permissions and rights on the protected system registry key to fix permissions denied issue, follow these steps:
- Run Registry Editor (RegEdit).
- Navigate to the registry key which user wants to modify its security settings.
- Right click on selected registry key, and select Permissions.
- Click on the Advanced button.
- In “Advanced Security Settings” dialog window, go to the Owner tab.
- Select and highlight the currently logged on user name or Administrators group (if user is a member of Administrators” in the Change owner to: box.
- Select the tick the check box for Replace owner on subcontainers and objects option, and click OK.
- Back in “Permissions” dialog window, click on Add… button.
- Enter the user’s login user name in the Enter the object names to select text box, and click on the Check Names button.
If there is error with the user ID entered, correct the error. If there is no error found, click the OK button.
- Back in “Permissions” dialog window, select and highlight the newly added user name in Group or user names: section, and tick the checkbox for Allow access right next to Full Control in the Permissions for <user name> section.
Note: Read permission is automatically selected when Full Control is granted.
Click on OK when done.
Tip: If user is a member of Administrators group, it’s possible to grant to Full Control access rights directly to Administrators too, which will be extend to all users with administrator’s privileges.
User can now perform any “operation” such as add, create, edit, change, modify, delete, erase or remove on the registry keys been granted full control permissions.
Related Articles
- Take and Grant Full Control Permissions and Ownership in Windows 7 or Vista Right Click Menu
- How to Take Ownership and Grant Permissions in Windows Vista
- How to Disable Registry Editor Editing Tool (RegEdit)
- Easier Way to Take Ownership and Grant Access Files or Directories in Vista
- How to Disable Write Access to USB Hard Disk and Flash Key Drives
- Fix Windows Registry Errors with ERROR DOCTOR
- Oracle Database Import Error 3113/3114
- IMP-00016 Required Character Set Conversion Not Supported Error when Import to Oracle Database
- IMP-00013 Oracle Import Error
- Using Regedit.exe or Regedt32.exe with Differences Explained










































November 6th, 2009 12:50
Followed instructions and still not able to delete a key whether I change ownership to myself or administrator.
November 5th, 2009 09:59
I did all that and it still won’t allow me to add any keys to the tcpip key but it will allow me to add it to any other place but that.
September 26th, 2009 16:01
It does not work in Windows 7 when I try to rename the Safeboot (Minimal, network) under HKLM\System\CurrentControlSet\Control (to disable safe mode)