How to restrict users from accessing DBM Settings

One would think this would be a setting in Rights|Actions, but access to DBM Settings is restricted in Rights|Registries

Allow users to change their DBM settings only	Allow users to change settings for local machine only

If none of these parameter rights are granted, an Admin login window appears when the user attempts to access Program/Settings: