Instead of hijacking richf's thread I thought I ask in a new one. How does one use wildcards in a single statement to protect everything under and after a certain point in an entry? Picking a random entry for example, if "HKEY_LOCAL_MACHINE\Software\Microsoft\Ole" has values in it, along with additional subkeys (HKEY_LOCAL_MACHINE\Software\Microsoft\Ole\Whatever) and those subkeys also have subkeys (HKEY_LOCAL_MACHINE\Software\Microsoft\Ole\Whatever\More). Would "HKEY_LOCAL_MACHINE\Software\Microsoft\Ole\**" protect all entries in "Ole", all subkeys under "Ole" and their subkeys? Or would I need something like "HKEY_LOCAL_MACHINE\Software\Microsoft\Ole**\**" ?