By default User Registration is enabled after a fresh Mantis Installation.
Everyone can easily create an account.

From the documentation its not so clear how to disable it and there is no obvious option in the mantis admin interface either.

To actually disable it, you have to open the file  config_inc.php
in the mantis root Dir and add this line:

$g_allow_signup = OFF;