Friday, January 9, 2009

Prevent access to registry editing tools

Method 1: One way to do this in Windows XP professional is through gpedit.msc

Start>Run... type: gpedit.msc

In the 'Group Policy' window expand 'User Configuration' expand 'Admininstravive Templates' and select 'System'

Double-click 'Prevent access to registry editing tools' in the pane towards the right.

Choose 'Enabled' and apply.

 

Method 2: The second way is to use the registry itself. To disable it for the current user: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"=dword:00000001

To disable it for all users: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"=dword:00000001

If one tries to run regedit after applying this tweak a message box will appear stating "Registry editing has been disabled by your administrator"

No comments:

Post a Comment