Possible to Restrict Access to Registry Editing? 1

[gasmask]

Does anyone know IF and HOW the Administrator can restrict access to regedit and other registry editing tools on non-administrator accounts?

 

[bcastner]

Use the gpedit.msc snap-in.

 

[bcastner]

Not sure what the IF means in your thread.

Two tools are available:

1. To restrict access to the registry components on a machine basis: Start regedit and use Tools, Permissions to restrict the users access to the registry keys.

2. Use gpedit.msc:

Start, Run, gpedit.msc

Scroll to Administrative Templates, Windows Components, System and enable 'Prevent access to registry editing tools.'

In a domain setting you would use policy settings at this level to perform similar tasks.

On both settigs you should review some of the standard policy templates to see if employing a modifed version of the standard templates would be the better approach than on a per-machine basis. It usually is.

 

[gasmask]

Thanks!