Frans is correct - the default for 2k and XP is to exclude normal users from being able to create/write to the WINNT folder. It also keeps them from updating the registries. If you want them to be able to do these things - rights will need to be granted.

Just working the help desk - we have had lots of trouble with non-government machines where tech departments actually create non-admin users. Disables the users .ini file and other troubles - we end up having to redirect those files to some directory where users do have access. I know that they do not have access to the HKEY_Local_Machine branch - but I would assume that they can get to HKEY_Local_User (we don't use that much yet).

I have seen some corporate users that cannot even see their Windows/WINNT folder. As the lockdown continues, it can only get worse.