User Level Apps

Often a program will run only as an administrator. This is usually because it wants to access parts of the registry that are protected. To find out what you need to enable:

Try setting up failure auditing on the local machine hive. Run regedt32.exe then browse to HKLM, then Edit|Permissions|Advanced|Auditing|Add|"everyone"|OK then check the "Failed" box on Full Control, Set Value, Create Subkey, Enumerate Subkey, Delete, Create Link

Also, enable local auditing in local security policies if it isn't already.

Then try again logged on as a normal user. Then check the Event log security for errors.