Internals : Description of keys in HKLM\Security\Policy

 

 

Method 5 suggests setting one of those keys, but does not explain what it does.  Seems to be related to Kerberos.

 

Try using procmon.exe and use a filter to see what process is reading those keys.  It may be hard to do if it is read very early after boot, although whatever is reading the key must be monitoring it to, so you can trick the process into reading the key if you modify it (whatever is watching the key will need to read it)

 

Hope that helps.