Problem
You want to retrieve the ACL of a registry key.
Solution
To retrieve the ACL of a registry key, use the GetAcl cmdlet: PS >GetAcl HKLM:\Software
Path Owner Microsoft.PowerShell.... BUILTIN\Administrators
Access CREATOR OWNER Allow
...
Discussion
“Get the ACL of a File or Directory,” the GetAcl cmdlet retrieves the security descriptor of an item. This cmdlet doesn’t only work against the registry, however. Any provider (for example, the filesystem provider) that supports the concept of security descriptors also supports the GetAcl cmdlet.
The GetAcl cmdlet returns an object that represents the security descriptor of the item and is specific to the provider that contains the item. In the registry provider, this returns a .NET System.Security.AccessControl.RegistrySecurity object that you can explore for further information.
If you need dedicated infrastructure for retrieving ACL information from Windows registry keys, consider a Morocco Dedicated Server for greater control over access permissions, registry management, PowerShell administration, system configuration, and Windows-based workloads.