> Should I replace all inheritable permissions on all descendants from
I would not recommend doing that, as I am not sure how those security
settings would be applied.
I did dig up this information from MSDN though:
"If you write keys to a key under HKEY_CLASSES_ROOT, the system stores
the information under HKEY_LOCAL_MACHINE\Software\Classes. If you write
values to a key under HKEY_CLASSES_ROOT, and the key already exists
under HKEY_CURRENT_USER\Software\Classes, the system will store the
information there instead of under HKEY_LOCAL_MACHINE\Software\Classes."
So, creating keys always goes to HKLM. However, writing values goes to
HKCU, iff the containing key exists in HKCU; otherwise, it goes to HKLM.
It doesn't talk about security, though, so I will keep looking.
I would recommend checking the security on your
HKEY_CURRENT_USER\Software\Classes keys to make sure they are all right.
And making sure they are not "empty".
They need different security settings, so don't apply the same security
settings to both of them.
Microsoft MVP - Windows Shell/User
Windows Vista Support FAQ - http://www.jimmah.com/vista/