Reg.exe in Vista has gain a new command line option "flags". You can use it to see some interesting things, for example, whether a registry key is virtualized. C:\>reg flags /? REG FLAGS KeyName [QUERY | SET [DONT_VIRTUALIZE] [DONT_SILENT_FAIL] [RECURSE_FLAG]]