The redbook for NT ADSM does a fairly good job of explaining this
if my mind serves me well.  Talking about access to the registry while
users are logged on.  In some cases, you were forced to move certain
parts by hand.  Has to do with lock/permissions mechanism being put on
certain parts of the active registry.

ADSML