I want to programmatically set the permissions on a Registry key to allow a specific user rights to update the Registry key value.

I am trying to use RegSetKeySecurity(HKEY, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR )

I think I have HKEY and SECURITY_INFORMATION, but how do I get the pSecurity_Descriptor for a specific user account under Win2000?

Thanks for any help,
-Mike