I'm new to Intune and currently experimenting with the Security Baseline

On Bogdan comment, sometimes you have to enable a policy to configure the disable. By setting this to the default policy you are making sure the configuration is the way you what it. And if someone does change the registry entry, it will change back again.