When you use Regedt32 to double click:

HKEY_LOCAL_MACHINE\System

you will note a Clone subkey that is not accessable.

The Clone subkey is built during system startup and contains a temporary copy of the control set that is being used to start the computer. When Winlogon reports that the startup was successful, the Clone subkey becomes the LastKnownGood control set.