Symantec 10551441 Reference Guide - Page 17

3 Chapter Reset ACL tool This chapter includes the following topics: ■ About the Reset ACL tool ■ Restricting registry access with the Reset ACL tool About the Reset ACL tool Reset ACL (Resetacl.exe) lets you limit access to the Symantec AntiVirus registry key on Windows XP/2000 computers. By default, these computers allow all users to modify the data stored in the registry for any application, including Symantec AntiVirus. Reset ACL removes the permissions that allow full access by all users to the following Symantec AntiVirus registry key and its subkeys: HKLM\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion Restricting registry access with the Reset ACL tool You can use the Reset ACL tool to restrict registry access. To restrict registry access with the Reset ACL tool 1 Roll out Resetacl.exe, located on the Symantec AntiVirus CD in the Tools folder, to unsecured computers. 2 Run Resetacl.exe on each of these computers. After you have run Resetacl.exe, only users with Administrator rights can change the registry key values. While the Reset ACL tool boosts security for Symantec AntiVirus on these computers, administrators should be aware that there are several trade-off considerations.