This is very cool.
A few very minor suggestions for edits on changing the key's permissions:
- Don't need to select "Everyone" before clicking "Advanced" or "Disable inheritance" -- both apply to the entire security descriptor, not just to the Everyone ACE.
- In the screenshot where Set Value and Delete are set, I'd also point a red arrow at Read Control to make it clearer that it needs to be unchecked (as it will start out checked by default).
- The screenshots that show only the Deny/Everyone ACE are incorrect -- they're what you'd see if you had clicked "Remove all inherited permissions from this object" instead of "Convert inherited permissions..."
- The best way to revert the key's permissions to their original state is to right click the parent key (Instances), choose Permissions, click Advanced, check the "Replace all child object permission entries with inheritable permission entries from this object" box, click OK, then Yes. (Note that a reboot will be needed for any changes to the driver's altitude to take effect.)
Microsoft