Can't be done, ACL is integral to Windows and is there for 'your protection'. Plus they made it so 2008 cannot install to FAT32 (avoiding NTFS style ACL's).
Anyways the best alternative for files/folders is the right click take ownership shell extension.
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\*\shell\runas]
@="Take Ownership"
"NoWorkingDirectory"=""
[HKEY_CLASSES_ROOT\*\shell\runas\command]
@="cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant *S-1-5-32-544:F"
"IsolatedCommand"="cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant *S-1-5-32-544:F"
[HKEY_CLASSES_ROOT\Directory\shell\runas]
@="Take Ownership"
"NoWorkingDirectory"=""
[HKEY_CLASSES_ROOT\Directory\shell\runas\command]
@="cmd.exe /c takeown /f \"%1\" /r /d y && icacls \"%1\" /grant *S-1-5-32-544:F /t"
"IsolatedCommand"="cmd.exe /c takeown /f \"%1\" /r /d y && icacls \"%1\" /grant *S-1-5-32-544:F /t"
But for registry you'll have to learn how to take ownership from powershell. For instance this snip will allow me to delete a LOCKEDKEY.
$key = "registry::HKCU\Software\Microsoft\LOCKEDKEY"
$acl = Get-Acl -Path $key
$permission = 'Administrators','FullControl','ContainerInherit, ObjectInherit','None','Allow'
$accessRule = New-Object System.Security.Accesscontrol.RegistryAccessRule $permission;$acl.SetAccessRule($accessRule)
$acl | Set-Acl -Path $key
Remove-ItemProperty -Path $key
That is the way it works for the past 6 years with TrustedInstaller.
Alternatively you can spawn your regedit or batch scripts via TrustedInstaller token using a third party app like Devxexec.exe. This way you can avoid any permissions changes as TrustedInstaller has access to everything that you do not (and vice versa)
@ECHO OFF
devxexec.exe /user:TrustedInstaller regedit.exe
PAUSE