There is currently no way to modify the system policies. A System Policy Editor (either standalone or as an mmc console) needs to be implemented.
Attachment is a condensed form of RESTRICTIONS and RESTRICTIONS2 from Geoff Chappell.
All steps needed to implement MMC
Can't run services.msc
Fix (and fork?) the shell policy restriction code that we got from Wine