When you attempt to use permissions to restrict access to the Registry, you must understand what each setting does, when to use it, and the ramifications of using it. Table A lists the permissions that restrict Registry access. You can use each permission option to control Registry rights for an individual or a group.
The Registry provides three groupings of these permissions. These groupings simplify the process of defining user access to the Registry keys. The Full Control grouping gives users complete access to the Registry. It includes all of the permissions that Table A lists. The Read grouping gives users the Query Value, Enumerate Subkeys, Notify, and Read Control permissions. The Special Access grouping lets administrators choose any combination of permissions for a user or group.