I am trying to create a CertificateStore

new CertificateStore(StoreLocation.LocalMachine, "MY")

but I encounter an exception. The code works fine when I run as administrator, but when I run as a low priviledged account it doesn't work. Does anyone know the minimum set of permissions I need to do this?

LocalMachine certificates are stored in the registry under HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates

You will need read/write permission for this registry key.