We did a migration from one AD domain to another. We used the moveuser.exe MS tool and it appears to have broken some registry security settings on the hkcu\software\classes key. We noticed it because users can not install any exchange/outlook forms. The issue has been traced back to the registry security. This problem is only for the users profile on each machine we migrated. They can not view the security settings for that key. I was hoping I could make an msi that adds the domain users group (full control) to the noted key when the user logs in and that would fix our problem. Any ideas on how to create an install package that would change that registry key's security?