Ummmm ... Oh well, If you go to the command prompt and simply type subinacl there is a bit more information ... especially the section with /object_type is of interest for you I think.

OR ... did I miss something?

You want to change SIDs that are registry values inside ntuser.dat ?`

Hmmm ... then we have a bit of a catch 22 situation there [Smile]

Hint: ntuser.dat is nothing else than HKEY_CURRENT_USER
_________________________