I already answered -- they key must have only inherited permissions from Services key. Just open Services key permissions and you will see, there are several ACEs (I don't remember exactly). System and Administrators have Full Control, Domain Users -- Read and there should be Creator Owner too.
↧