Hi,
Now that editreg is displaying enough info here is an example of what
NTConfig.POL looks like:
\AdminConfigData\Computers\.default\Software\Microsoft\Windows\CurrentVersion\Run
SECURITY
Owner: S-1-5-32-544
Group: S-1-5-21-1988699175-926296742-1295600288-513
Clearly, the root key in \AdminConfigData for an NTConfig.POL file, while
NTUSER.DAT has a root key of \$$$PROTO.HIV :-)
Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com