How to set permissions on registry keys from the command line?
Joe's post about SubInAcl is perfectly valid. I happen to prefer SetACL, which basically does the same things with a different command-line syntax. It's also available as an ActiveX control such that it's easy to call in scripts.
SubInAcl is your friend here.