Ok, was just doing some tests ...

1) Passing an environment variable no workie

2) Accessing HKCU from a process started with alternate credentials no workie.

Hey - had to try it eh ? You give any of this a shot ?