Search: Advanced search
Browse by category:
How to Disable Access to the Windows Registry
Messing around in the Windows Registry can cause all kinds of problems if you’re not careful. If you share your PC with others, you can prevent less experienced users from accessing and editing the Registry.
When you share a PC with other people, it can be really helpful to lock down certain aspects of Windows. For example, we’ve talked about how to prevent users from shutting down Windows and how to disable the Control Panel and settings interface. You can also disable access to the mother of all administrative tools—Registry Editor—if you’d prefer not everyone be able to get into it. Here’s how.
Home Users: Disable Access to the Registry by Editing the Registry
If you have Windows 7, 8, or 10 Home, you will have to edit the Windows Registry to make these changes. You can also do it this way if you have Windows Pro or Enterprise, but just feel more comfortable working in the Registry. (If you have Pro or Enterprise, though, we recommend using the easier Local Group Policy Editor, as described in the next section.)
Standard warning: Registry Editor is a powerful tool and misusing it can render your system unstable or even inoperable. This is a pretty simple hack and as long as you stick to the instructions, you shouldn’t have any problems. That said, if you’ve never worked with it before, consider reading about how to use the Registry Editor before you get started. And definitely back up the Registry (and your computer!) before making changes.
Before you get started editing the Registry, you’ll need to take two steps:
And if you have multiple users for whom you want to make changes, you’ll have to repeat those two steps for each user.
After signing on as the user you’re making changes for, open the Registry Editor by hitting Start and typing “regedit.” Press Enter to open Registry Editor and give it permission to make changes to your PC.
In the Registry Editor, use the left sidebar to navigate to the following key:
Next, you’ll create a new value inside that
Next, double-click the
You can now exit Registry Editor. The changes take place immediately and you can test them by simply trying to open Registry Editor again. You should get an error message. Now, you can sign out as that user, sign back on with your administrative account, and change that user’s account back to a standard account if that’s how it was before.
If you ever want to reverse the changes, you’ll need to sign back on as that user—changing the account to administrative one if it’s not already—and open up the Command Prompt with administrative privileges, since you won’t be able to access the Registry. At the prompt type the following command:
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /t Reg_dword /v DisableRegistryTools /f /d 0
This command changes the
Download Our One-Click Registry Hack
If you don’t feel like diving into the Registry yourself, we’ve created two downloadable registry hacks you can use. One hack disables access to Registry Editor and the other hack enables access. To use them, you’ll need to follow these steps:
Both hacks are included in the following ZIP file.
In the setting’s properties window, click the “Enabled” option and also make sure the “Disable regedit from running silently” option is set to “Yes.” When it’s allowed to run silently, users can still apply preconfigured REG files by executing them from the command line with a silent option. When you disallow this option by selecting “Yes,” users will not be able to make any changes to the Registry. When you’re done, click “OK.”
You can now exit the Local Group Policy Editor. Changes should take place immediately. To test it, just sign in as one of the affected users and make sure you can’t start Registry Editor. To reverse the change later, just go back to the same “Prevent access to registry editing tools” setting and change it back to “Not Configured.”