Jesper

> We don't modify these file's behavior nor their contents; we only make
> them Read-Only.

Making them read only IS modifying their behavior.

> We have to support several thousand users who are still using some
> legacy-ware that we have no control over.

I know all about legacy support. It bites.

> By the way, I checked the properties of "autoexec.nt" and "config.nt"
> in Vista and it shows the owner of these files as "SYSTEM". Also,
> even though we set the attribute of both files to Read-Only, "SYSTEM"
> still has full modifying priviledges according to Vista's properties
> for these files.

I'm not saying that it will be a problem. I am saying you don't know whether
it will be a problem, and if it becomes a problem for anyone, they won't
necessarily even be able to trace it to you. You could very well have blown
up hundreds or thousands of boxes and never even have heard of it. Or, you
could have had no problems at all. There is no way to tell. That is why PIF
files were invented, many years ago, to allow applications to provide their
own context for the WOW sub-system without stomping on other applications.