Like many others I'm trying to modify the registy upon login to the domain.

the HKCU does fine, but the HKR/HKLM balk.
I understand the reasons why, but the workaround using SU to call regedit has me at a loss.

What I'd like to do is have su call up regedit/kix and import to each machine the wanted entries as the local admin. (does the local admin have to have backup/restore privs too?)

So far my poking and prodding of su, regedit, kix, RTFM'ing have left me even more at a loss due to my complete lack of "programming 1337'ness".

Any help, clue or informative flaming, brow beating, links are appreciated.