Making changes to specific registry parts requires admin rights REGARDLESS if you have permission to edit these keys or value set explicitly. This means that if I want to make some changes to a very specific set of keys under very specific username that has been granted very specific rw permissions to these keys he still needs to be part of Admin group which defeats the point as admin group can now manage access easier than usual.
My grand idea is to restrict access to these registry keys only to this user, let the rest have read-only access and kick-off admin group. The problem is that I cant do the last because then my specific user rw means jack shit since he cant modify registry via either API or built-in Windows tools.
Is there a way for me to fine-tune this somehow?
