Many organizations block mmc.exe execution (via endpoint protection policies like SentinelOne), which disables every MMC-hosted tool: regedit, Event Viewer, Device Manager, and all MMC snap-ins.
Items can be disabled in the config, by there Material. The config can be reload with /opirc reload to change the disabled item without restarting the server. For example to disable wither head and ...