http://blogs.msdn.com/secureapps/archive/2007/01/30/writing-to-registry-some-best-practices.aspxUse the following best practices when dealing with the Windows registry. Use of registry reduces application portability. Therefore, use only if required. Don’t use the registry as a configuration trash–bin. Don’t store secrets in registry. Encrypt applicationen-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.msdn.com/secureapps/archive/2007/01/30/writing-to-registry-some-best-practices.aspx#3251945Tue, 12 Jun 2007 18:54:03 GMT91d46819-8472-40ad-a661-2c78acb4018c:3251945Derek Noonan<p>&quot;Don’t write data to HKLM. Reading back the data will require the user to be logged on as administrator...&quot;</p> <p>Should this not read: &quot;Writing data to HKLM will require that the user be logged on as an administrative user...&quot; - as you corrrectly point out anyone can read data from HKLM</p> http://blogs.msdn.com/secureapps/archive/2007/01/30/writing-to-registry-some-best-practices.aspx#3699871Thu, 05 Jul 2007 13:05:58 GMT91d46819-8472-40ad-a661-2c78acb4018c:3699871Anuj Sharma<p>&quot;Discourage users from directly editing the registry&quot; -- Instead of that Don't give any rights to the normal user to access registry. Only Administrator can open the registry. &amp; if some one wants to edit &nbsp;/ write some values in registry he /she should have administrative rights.</p> http://blogs.msdn.com/secureapps/archive/2007/01/30/writing-to-registry-some-best-practices.aspx#4907954Fri, 14 Sep 2007 12:11:08 GMT91d46819-8472-40ad-a661-2c78acb4018c:4907954John Irvine<p>Writing to the registry in Vista... prob. The purpose of the HKLM is to store data to all users (Machine specific)? Yes this could be stored in an INI file but I thought the registry was the replacement of INI files. The actual problem is that the Install prog appears to be a user, not administrator. If this is right then, either the program needs administrative rights or you give user rights to the specific hive of a HKLM key say SOFTWARE/.... (No Way..) So the issue is in the install. The registry is a wonderfull way to store user specific and machine specific data, is Microsoft locking it down so only Windows has access?</p> http://blogs.msdn.com/secureapps/archive/2007/01/30/writing-to-registry-some-best-practices.aspx#5460014Mon, 15 Oct 2007 11:50:26 GMT91d46819-8472-40ad-a661-2c78acb4018c:5460014maltwhiskman<p>Can IE extensions get read only access to HKLM or HKCU?</p>