prohibit regidtry changes

[Nemanja]

How to prohibit users from changing registry values. For
example he/she can make a simple *.reg file run it and on
next log on the registry values would be aplied besides
the GPO. I have prohibited the editing of regiistry with
the GPO but they can still change the values, at least I
know that they can do it after some testing.



Nemanja

 

[News Reader]

If you disable registry tools from group policy editor, users cannot
normally change registry by running reg files. That isn't bullet proof
protection. It isn't very difficult to create copy of regedit.exe and with
hex editor search that restricting policy key and change it to something
else.

 

[Anders]

Use regedt32.exe, you can edit security on a per-key basis!

/Anders