The problem is caused by the fact that TRegistry (and the derived TRegInifile) always opens a key with KEY_ALL_ACCESS, even if only KEY_READ would be needed. You can avoid this by going back to using the API registry functions (RegOpenKey et al.), or create a new class from the TRegistry component, and change the new TRegistry class to add an access property.