I created an app object for my trusted root cert that only contains the key
HKEY_CURRENT_USER\Software\Microsoft\SystemCertifi cates\Root\ProtectedRoots.
If I associate it with the Root of the tree, users only, then it works fine
if it's put in the start menu or in App Explorer.
However, I want to Force Run/Run once this so that users don't have to
"install" it. When I make it force run, (and leave the "Show Progress" up),
I don't see it distribute (which may be because it's only one Key, and
happening too fast) but more importantly, it doesn't work. It doesn't add
the trusted root, and I still get cert errors on my SSL Pages.

When do User keys get distributed? Do I have to manually run this app in
order to get the User Key to import into the reg? If not, What can I do to
track down why this isn't working on Force Run, but IS working when I
double click it.