You mentioned that the security is listed in the users NTUSER.DAT. This I assume is the Internal Security settings available in the REGEDT32 Program?

I added the user the local admin group, so wouldn't that give them access to all parts of the registry in HKCU?