I am reading Doug's paper again (not the first time), and I think you are right - this is probably the issue...grrrrrrrrr.

>Turning off UAC does not necessarily stop the registry from being virtualized. To write to hkey_local_machine, you still need elevated Admin rights.
>
>>Thanks Craig, but UAC is turned off on both of these user's.