HKLM\Software\Microsoft\MSDTC\Security\XAKey\* [*]
HKLM\Software\Microsoft\MSDTC\Security\XAKeyCNG\* [*]
HKLM\Software\Microsoft\MSDTC\Security\XAKeyCNGKeyDataBlob\* [*]
HKLM\Software\Microsoft\MSDTC\Security [AccountName]
HKLM\System\CurrentControlSet\Services\MSDTC [ObjectName]
HKLM\System\CurrentControlSet\Services\MSDTC [Start]
HKLM\System\CurrentControlSet\Services\MSDTC [DelayedAutostart]
HKLM\System\CurrentControlSet\Services\MSDTC [FailureActions]
HKLM\Software\Microsoft\MSDTC\MTxOCI\* [*]
HKLM\Software\Microsoft\MSDTC\XADLL\* [*]
HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup [MS Distributed Transaction Coordinator]
HKLM\Software\Microsoft\MSDTC\Setup [DownlevelVersion]
%SYSTEMROOT%\System32\MSDTC\Trace [dtctrace.log*]
%SYSTEMROOT%\System32\MSDTC [KtmRmTm*]
%SYSTEMROOT% [DtcInstall.log]
%LogLocation%
%LogLocation% [MSDTC.LOG]
HKLM\Software\Classes\CID\* [*]
HKLM\Software\Classes\CID.Local\* [*]
HKLM\Software\Classes\SVCID\* [*]
HKLM\Software\Classes\SVCID.Local\* [*]
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\* [*]
HKLM\Software\Microsoft\MSDTC [*]
HKLM\Software\Microsoft\MSDTC\Security [*]
HKLM\Software\Microsoft\MSDTC\Security [AccountName]
Additional_Options\Windows_Core_Settings