Check or manipulate the permissions on a given opbject. Which hive to use U - HKEY_USERS L - HKEY_LOCAL_MACHINE C - HKEY_CURRENT_USER R - HKEY_CLASSES_ROOT Query the permissions on a given object sid permanent Modify DACL access permission Grant - Combines with existing permissions Set - Overrides existing permission Deny - Adds ACCESS_DENIED_ACE_TYPE Revoke - Removes all ACCESS_ALLOWED_ACE_TYPE sid Change to object permissions will not be undone when command stopped SID(User/Group) for which to modify permission 32-bit access rights mask. Default: GENERIC_ALL