The Registry Filter is necessary for example when using either Enhanced Write Filter or File Based Write Filter to protect a device that has joined a domain. In this case the domain key, which changes frequently, is stored in the Windows Registry. However due to the write filter the key gets reverted to the original state on reboot. To avoid this the Registry Filter allows the exclusion of specific keys under HKLM to persist them to the disk even if a filter driver is active.