SUMMARY: Command line utility to modify registry acl's
Two users suggested using CACLS, but it doesn't do registry permissions. I found, and one other user suggested, subinacl.exe, which is a free download from Microsoft. Allows registry permission changes using domain group and usernames. Regini.exe is also available, but it doesn't allow changing the permissions based on domains, only local group/users.