Ja I could see that working nicely. Write a script that uses LoadHive to load the user's ntuser.dat file into HKEY_USERS, give the loaded hive a standard root keyname (like "tempuser") then in the script, poke the values you want into the loaded hive (it would know how to find it cause you gave it a std name), then simply unload the hive. Just make extra sure the hive is unloaded properly else caos will insue.