On Windows NT you can run regedt32 and set the permissions on the offending key. I know that sounds simplistic put that's what registry permissions are for. If you do want to take this approach, then I would recommend creating a Windows NT group and assigning the registry permissions under the group name, then include the users into that group. I think ( correct me if I'm wrong ) that the users logon script runs in the context of the user, not under the system context. If there were a way to switch context from user to system and bypass registry permissions, that would seem like a huge security gap to me. Of course, it all depends on the specific registry key your changing. If it's a Windows setting under HKLM, then your options are limited. If the key is in HKCU and it's an application that you wrote, than change the application to create these keys with different permissions. Sorry but thats all I can suggest. What key are you trying to change anyway ? I'll try some things over here and get back to you.
Shawn.
