I have questions regarding the security log events (529, 680, etc.) generated during RPC calls. This is in connection with trying to read the remote registry using alternate (than the current context) credentials.
As per your advice, I have initiated a new discussion on the suggested MSDN forum at http://social.msdn.microsoft.com/Forums/en-US/etw/thread/0eb244e4-1cbb-4425-bae9-75d37534ae40.