Registry (Global Object Access Auditing)
This topic for the IT professional describes the Advanced Security Audit policy setting, Registry (Global Object Access Auditing), which enables you to configure a global system access control list (SACL) on the registry of a computer.
If you select the Configure security check box on this policy’s property page, you can add a user or group to the global SACL. This enables you to define computer system access control lists (SACLs) per object type for the registry. The specified SACL is then automatically applied to every registry object type.
This policy setting must be used in combination with the Registry security policy setting under Object Access. For more info, see Audit Registry.