David,
HKEY_CLASSES_ROOT is not an actual registry location, but the merging of two other locations: HKEY_CURRENT_USER\Software\Classes and HKEY_LOCAL_MACHINE\Software\Classes. It is actually a remnant from the 16-bit Windows days and is provided for compatibility with older apps.
Microsoft recommends that if you are accessing these values as anything other than an interactive user, which you almost certainly are if you are using Management Suite, you should access these values through HKEY_LOCAL_MACHINE\Software\Classes. See this article on MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/ms724475(v=vs.85).aspx.
If you change your rules to use HKEY_LOCAL_MACHINE\Software\Classes, they should work fine.
Regards,
Vince