Restrict access to REGEDIT/REGEDT32

This tip is to prevent someone from running the REGEDIT/REGEDT32 editor.

Using Regedt32 to edit:

  1. Select [Hkey_Users]. Then go to "Load Hive" from the registry Menu.
  2. Browse to the profile directory of the user you want to restrict and select NTUser.dat file.
  3. When prompted for Key Name, input their login UserID.
  4. Now, select the key name (UserID) you just put in, and browse to SoftwareMicrosoftWindowsCurrentVersionPolicies
  5. If no System sub-key exists, go to "Add Key" from the Edit Menu. Here, type System in the Key name field and click "OK".
  6. Highlight System and go to "Add Value" from the Edit Menu. Here, type DisableRegistryTools, using type REG_DWORD and set it to 1.
  7. Now, highlight the Key name (UserID) as in Step 3, and go to Unload Hive from the registry menu. You should see the UserID disappear from the [Hkey_Users].
  8. Log in and verify that that user will not be able to run Regedt32 or Regedit.


    Requires Free Membership to View

    Login

This was first published in April 2001

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.

    Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

    Back to top