We've just recently noticed that when we right-click on one of our registry keys such as HKEY_CURRENT_USER (or any of the others) that there is a group in there called "RESTRICTED" that simply has "read" permission to the entire hive. If we manage our PC, it's not a group on the machine itself. Has anyone else found this or know from where that group came from and what it's purpose is?