怎么设定访问注册表的权限

//************************************************************* 
 // 设定某个对象的访问权限 
 //************************************************************* 
 DWORD CUSBCleanerApp::AddAceToObjectsSecurityDescriptor ( 
     LPTSTR pszObjName,          // 对象名											// hkey 
     SE_OBJECT_TYPE ObjectType,  // 对象类型					// SE_REGISTRY_KEY，若用预定义键必须用如下"CLASSES_ROOT", "CURRENT_USER", "MACHINE", and "USERS". 
     LPTSTR pszTrustee,          // trustee for new ACE				// TRUSTEE_IS_NAME or TRUSTEE_IS_SID 
     TRUSTEE_FORM TrusteeForm,   // format of trustee structure			// TRUSTEE_IS_SID or TRUSTEE_IS_NAME 
     DWORD dwAccessRights,       // access mask for new ACE			// GENERIC_ALL，访问的权限设置 
     ACCESS_MODE AccessMode,     // type of ACE					// SET_ACCESS 
     DWORD dwInheritance         // inheritance flags for new ACE		// CONTAINER_INHERIT_ACE 
 )  
 { 
 DWORD dwRes = 0; 
 PACL pOldDACL = NULL, pNewDACL = NULL; 
 PSECURITY_DESCRIPTOR pSD = NULL; 
 EXPLICIT_ACCESS ea; 

 if (NULL == pszObjName)  
     return ERROR_INVALID_PARAMETER; 

 // Get a pointer to the existing DACL. 
 // 获取已存在的DACL 
 dwRes = GetNamedSecurityInfo(pszObjName, ObjectType,  
       DACL_SECURITY_INFORMATION, 
       NULL, NULL, &pOldDACL, NULL, &pSD); 
 if (ERROR_SUCCESS != dwRes) { 
     printf( "GetNamedSecurityInfo Error %u\n", dwRes ); 
     goto Cleanup;  
 }   

 // Initialize an EXPLICIT_ACCESS structure for the new ACE.  

 ZeroMemory(&ea, sizeof(EXPLICIT_ACCESS)); 
 ea.grfAccessPermissions = dwAccessRights; 
 ea.grfAccessMode = AccessMode; 
 ea.grfInheritance= dwInheritance; 
 ea.Trustee.TrusteeForm = TrusteeForm; 
 ea.Trustee.ptstrName = pszTrustee; 

 // Create a new ACL that merges the new ACE 
 // into the existing DACL. 

 dwRes = SetEntriesInAcl(1, &ea, pOldDACL, &pNewDACL); 
 if (ERROR_SUCCESS != dwRes)  { 
     printf( "SetEntriesInAcl Error %u\n", dwRes ); 
     goto Cleanup;  
 }   

 // Attach the new ACL as the object's DACL. 

 dwRes = SetNamedSecurityInfo(pszObjName, ObjectType,  
       DACL_SECURITY_INFORMATION, 
       NULL, NULL, pNewDACL, NULL); 
 if (ERROR_SUCCESS != dwRes)  { 
     printf( "SetNamedSecurityInfo Error %u\n", dwRes ); 
     goto Cleanup;  
 }   

 Cleanup: 

     if(pSD != NULL)  
         LocalFree((HLOCAL) pSD);  
     if(pNewDACL != NULL)  
         LocalFree((HLOCAL) pNewDACL);  

     return dwRes; 
 }