Good idea, Roger. The "RegMon" program I linked can log registry accesses already. I'm just looking to take it the next logical step and have a deny list as well. By the way, I'm also looking for bidirectional deny capablility (reads as well as writes). One might wish to control those independently, although that is not strictly necessary.