Disabling Registry edit

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have a couple of PCs on Network and would like to
disable registry editing for some accounts. Would appreciate
advice on this matter.

Thanks
 
registry editing as running "regedit" or installing programs?
a) you can degrade users rights... make them just users, not power or
admin...
b) you can create hash rule on running regedit.exe, somewhere in group
policy
 
Joaquin said:
I have a couple of PCs on Network and would like to
disable registry editing for some accounts. Would appreciate
advice on this matter.

Thanks
Click to expand...

You haven't given us enough information to get focused answers. If the
machines are on a domain, use Group Policy settings on the server.
Central management of workstations is one of the many reasons to use a
server. If the machines are XP Pro but only in a workgroup, use the
Group Policy Editor to set things up the way you want.

For questions regarding Group Policy, post here:
microsoft.public.windows.group_policy

If the machines are XP Home, look into using the MS Shared Computer
Toolkit or the Security Console from MVP Doug Knox.

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
http://www.dougknox.com

Malke
 
There are two keys in the Registry that you can change in order to
disable the registry editor:

To disable it for everyone:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
On the right side, set "DisableRegistryTools" to 1

For certain users:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
On the right side, set "DisableRegistryTools" to 1
 
Back
Top