sure.
you are trying to modify policies with non-admin account via registry-hacking.
that's no go.

for some policies in NT it works but with w2k or newer they should all fail.
if you are not using proper policies, you indeed need su or similar.
you might want to add some sort of checks to see how deep your script runs with the current script.

I suggest you change to real policies thus you don't need to hack everything and expose passwords etc.
check out:
http://de.samba.org/samba/devel/docs/html/policymgmt.html
_________________________
!

download KiXnet