Darren, I am using the gpmc's built in security', however, the options I am getting are: Propogate inheritable permission Allow inheritable permissions Don't allow permission toi be replaced. This is where my dilemna is. Thanks, Jean ----- Original Message ----- From: gptalk-bounce@xxxxxxxxxxxxx <gptalk-bounce@xxxxxxxxxxxxx> To: gptalk@xxxxxxxxxxxxx <gptalk@xxxxxxxxxxxxx> Sent: Thu Jul 12 15:45:44 2007 Subject: [gptalk] Re: Registry Key Jean- There’s a couple of ways to do that. You can use Group Policy’s built-in registry security capability or you could use a combination of a startup script (assuming the key is under HKLM) and a utility like subinacl.exe to do it. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Mesidor, Jean Sent: Thursday, July 12, 2007 12:28 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Registry Key I am trying to create a registry key to a GPO to prevent SMS installation on some clients. I am using GPMC to do that, but I can't modify the security on the key.. How can I achieve that please? Thanks, Jean