"you will have todo all permissions file by file, which is rubbish if you do the same on the windows folder"
No - no you don't. Just because you don't understand it doesn't make it broken. If you screwed up the permissions on your Windows folder, run this from an elevated Command Prompt:
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose