The Windows operating system registry is a hierarchical database. It contains almost all information about all basic system settings - data about software and hardware settings, user profiles, system policy settings, etc. Unauthorized changes to the registry can lead to unpredictable consequences.
Instructions
Step 1
To restrict the ability of inexperienced users to modify the registry and increase the security of the system, you can set special restrictions. This can be done in several ways.
Step 2
The Group Policy snap-in launches. In the left hierarchical menu, open the "User Configuration" branch, go to the "Administrative Templates" section and select the "System" item.
Step 3
A list of adjustable parameters will be displayed in the right part of the window. Find the "Make Registry Editing Tools Unavailable" option here, select it, and click the "Show Properties Window" button on the toolbar. In the window that opens, select the "Enabled" radio button and click the OK button.
If you also enable the Run only allowed Windows applications option, you can prevent the administration utilities from being used.
Step 4
You can prevent the launch of the standard registry editor by making special changes to it.
Open the main menu "Start", start the command line "Run …". In the window that opens, enter Regedit.
Step 5
The "Registry Editor" window will open. Go to HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem. If the System subkey does not exist, then create it.
Create a DWORD parameter in this section, name it DisableRegistryTools and set the value to "1".
Step 6
If access to the registry was blocked using the DisableRegistryTools parameter, then editing it using standard tools will be impossible even by the user who set this restriction. To re-open access to the standard registry editor, in Windows XP, you must launch a third-party registry editor and delete the DisableRegistryTools parameter or set it to "0", or log on to the system under a different account and make these changes using the standard editor. On 9x / NT / 2000 systems, it is sufficient to create a text file with the extension ".reg" containing the text REGEDIT4
[HKEY_CURRENT_USERSoftwareMicrosoft
WindowsCurrentVersionPoliciesSystem]
"DisableRegistryTools" = dword: 0 and launch it for execution, agreeing to change the registry.
