$ 0 0 Make sure if subkeys under CertSvc key have the same permissions. And what about Remote Registry service?