Can anyone tell me the difference between these options

Question

Hi, I'm trying to configure a key in the following location in registry editor:

HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security

I'm gettting a prompt as the following.

Configure this key then
propogate inheritable permissions to all subkeys.
replace existing permissions on all subkeys with inheitable permisions.

Do not allow permissions on this key to be replaced.

What are the differences between these keys? I surfed in the web but couldn't understand. I appreciate if someone explains it to me with examples if possible. Thanks in advance:-)

Answer 1

Hello RapunzelM,

Thank you for your question.

Propagate inheritable permissions to all subfolders and files: Selecting this option means, all the subfolders and files will inherit permissions from the parent folder. In case of a mismatch or conflict, explicit permissions that were assigned to the subfolders or files will override the inherited permissions.

Replace existing permissions on all subfolders and files with inheritable permissions: This option will overwrite all the settings on all subfolders and files with the ones on the parent, so ultimately they will have identical permissions to the parent folder.

Do not allow permissions on this file or folder to be replaced: Use this setting for subfolders and files that you do not want to inherit permissions. For this, make an additional entry for those subfolders and files that will not inherit permissions e.g. let’s say you want the “A” folder to inherit permission but don’t want “B” folder to inherit permissions, in that case create an entry for the “B” folder.

---

--If the reply is helpful, please Upvote and Accept as answer--