You cannot prevent users to change registry entries using Remote Registry even if client Self-Protection is enabled on the target machine.
Click image to enlarge.
To access the Remote Registry from a remote computer:
- Run regedit.exe.
- Click File > Connect Network Registry...
- Enter the IP address of the machine with Security Agent installed.
You can now edit any registry key/entry.
This is an AEGIS limitation. Self-Protection does not protect the registry being accessed remotely.