Yeah, you don't even have to go into the registry.
Go to "Local Security Policy" under Administrative Tools. Under Security Settings > Local Policies > Security Options, you'll find "Shutdown: Allow system to be shut down without having to log on". Disable that, and you're set.