(TargetObject:\\Policies\\Microsoft\\Windows\ NT\\SystemRestore* OR TargetObject:\\Microsoft\\Windows\ NT\\CurrentVersion\\SystemRestore*) (TargetObject:DisableConfig OR TargetObject:DisableSR) Details:DWORD\ \(0x00000001\)