winreg key, right click permissions. You can add a group or user, then select the group or user and select advanced to control the permissions.

Another option would be to use SubinACL which still works on higher OS - I think it was originally in the Windows 2000 SDK. It's less convoluted than trying to manage the registry settings.

You can download it from here:

https://www.microsoft.com/en-us/download/details.aspx?id=23510

And find directions on it's usage here:

https://support.microsoft.com/en-us/kb/325349

Sue