I get the same error (actually, its: isactiveguard: regopenkeyexfailed 2 0), but my permissions are set like you describe. For that particular...
Separate names with a comma.