DFS / Remote Registry Service disabled

hello,

have 2 fileserver (windows 2012 r2) running in microsoft failover cluster.
on both dfs installed.

have following problem on 1 of these maschines.  
after reboot dfs service did not start, because depends on remote registry service.

have set startup typ of remote registry service automatic , started service.
after reboot startup type of remote registry service change disabled,
prevents start of dfs service.

can again , again, after reboot remote registry service disabled.

have idea disabling remote registry service ?

kind regards
matthias

after solid week of troubleshooting microsoft support on severity case regarding disabling startup of remote registry service, believe have culprit. upon enabling registry auditing on several servers on key "\registry\machine\system\controlset001\services\remoteregistry", contains settings remote registry service, found this:

a registry value modified.

subject:
    security id:        system
    account name:        server name$
    account domain:        salem
    logon id:        0x3e7

object:
    object name:        \registry\machine\system\controlset001\services\remoteregistry
    object value name:    start
    handle id:        0x46c
    operation type:        existing registry value modified

process information:
    process id:        0x1b50
    process name:        c:\program files (x86)\trend micro\officescan client\tsc64.exe

change information:
    old value type:        reg_dword
    old value:        2
    new value type:        reg_dword
    new value:        4

trend office scan changing service disabled!

i had call trend support today , explained situation. confirmed damage cleanup process changing service disabled because it’s default setting way , remote registry poses security risk having enabled. advised tech service needed enabled allow dfs namespace service run. pointed me c:\program files (x86)\trend micro\officescan\pccsrv\admin\tsc.ini on office scan server , had me change remoteregistry = 1 remoteregistry = 0 . tell damage cleanup engine not touch service. once saved file, saw trend pop message on various servers stating settings being updated.

Windows Server  >  Server Core