Prevent access to the registry editor

Below I have shown how you can use Group Policy to prevent your users from opening REGEDIT.msc. This is a particularly useful restriction to apply to your end users & secure your devices.

In my environment I applied this to my users who log into Windows 10 and later devices.

1. Edit your Group Policy which applies to your users.
2. Navigate to User Configuration > Policies > Administrative Templates > System.
3. Edit the Policy named ‘Prevent access to registry editing tools‘.
4. Enable the policy & select Yes from the drop-down menu. Click OK

Once a user has logged into the device they will no longer be able to access the registry editor.