The permissions set for the winreg subkey determine who can remotely connect to a registry. If this subkey does not exist, all users can remotely connect to the registry.
To remotely connect to a registry, a user must have at least Read Access to the winreg subkey on the target computer.
After the user is connected, the type of access that the user has to various registry keys and subkeys is determined by the permissions that have been granted to that user. Administrators have Full Control permission to winreg, and Backup Operators have read-only access to winreg.
To view the permissions set for the winreg subkey, use Regedt32.exe. On the Security menu, click Permissions.
Regedit.exe allows user access to all subtrees except HKEY_CURRENT_CONFIG and HKEY_CURRENT_USER.
By default, the winreg subkey exists on both workstations and servers. However, it is enabled by default only on Windows 2000 Server. If you add these subkeys to the registry of a computer running Windows 2000 Professional, it will operate as described.