Below I have shown how you can use Group Policy to prevent your users from opening REGEDIT.msc. This is a particularly useful restriction to apply to your end users & secure your devices.
In my environment I applied this to my users who log into Windows 10 and later devices.
- Edit your Group Policy which applies to your users.
- Navigate to User Configuration > Policies > Administrative Templates > System.
- Edit the Policy named ‘Prevent access to registry editing tools‘.
- Enable the policy & select Yes from the drop-down menu. Click OK
Once a user has logged into the device they will no longer be able to access the registry editor.