if you add "DisableRegistryTools"=dword:00000001 then that will dissallow acces to regedit. if you add "DisableRegistryTools"=dword:00000000 to it then it will allow it.