Thanks Meredith, I tried what you suggested and added the username to the DACL for the registry key's they need access to. If you log on to the PC locally then they have access. If you connect to the registry remotely then it still denies access.

I'm using NT server 4.0, maybe there is something special about the Administrators group when connecting to remote registries?

Thanks for your help,
Kep.