Prevent access to the registry editor


Below I have shown how you can use Group Policy to prevent your users from opening REGEDIT.msc. This is a particularly useful restriction to apply to your end users & secure your devices.

In my environment I applied this to my users who log into Windows 10 and later devices.


  1. Edit your Group Policy which applies to your users.
  2. Navigate to User Configuration > Policies > Administrative Templates > System.
  3. Edit the Policy named ‘Prevent access to registry editing tools‘.
  4. Enable the policy & select Yes from the drop-down menu. Click OK
Prevent access to registry editing tools

Once a user has logged into the device they will no longer be able to access the registry editor.