Which of the following tools is used to modify registry permissions in Windows?

POLEDIT (Policy Editor) is used to configure system and user policies through administrative templates, not to directly modify registry key permissions.

REGEDIT can browse and edit registry values and data, but in legacy Windows versions it lacked the dedicated Security menu for modifying registry key ACLs that REGEDT32 provides.

REGEDT32.EXE, the older Windows NT/2000 registry editor, provides a dedicated Security menu that allows administrators to set access control lists and audit settings on individual registry keys, making it the purpose-built tool for modifying registry permissions - a capability the standard REGEDIT lacked in those versions.

SECEDIT is a command-line tool used to analyze and apply security configurations based on security templates, not for directly editing individual registry key permissions.