http://blogs.msdn.com/b/shawnfa/archive/2006/01/09/510843.aspxOver the weekend, Mike Rousos (a BCL tester who's been temporarily drafted onto the security team) posted an interesting piece about the new BCL registry security support on the BCL blog . While the title mentions RegistryPermission, the post is actuallyen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.msdn.com/b/shawnfa/archive/2006/01/09/510843.aspx#510907Mon, 09 Jan 2006 22:49:36 GMT91d46819-8472-40ad-a661-2c78acb4018c:510907shawnfaHi Steven, <br> <br>There sure is -- there's an equivilent overload to the RegistryAccessRule class which takes an IdentityReference. One type of IdentityReference is an NTAccount, which has a constructor NTAccount(string domainName, string accountName). There is also an IdentityReference subclass SecurityIdentifier if you only have a SID to work with. <br> <br>-Shawn<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=510907" width="1" height="1">http://blogs.msdn.com/b/shawnfa/archive/2006/01/09/510843.aspx#510851Mon, 09 Jan 2006 20:59:53 GMT91d46819-8472-40ad-a661-2c78acb4018c:510851StevenHopefully there is some level of functionality around to get the &quot;DOMAIN\user&quot; bit, doing it programmatically might be a pain and yeild some errors.<div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=510851" width="1" height="1">