|
|
|
|
| |
| How To Restrict Access to Registry Editor. |
| On a shared computer, you may want to registry access to some users. One can always use the Group Policy Editor, which is available only in Business, Enterprise & Ultimate editions. To do so, type gpedit.msc in Vista's Start Menu Search Bar and hit Enter. |
|
| Click Open User Configuration > Administrative Templates > System. Now double click Prevent Access To Registry Editing Tools setting. Set it to Enabled. Click OK. |
|
However THIS process locks out ALL users, including YOURSELF !  And to regain access, you have to again revisit Group Policy Object Editor when required, and change the policy to Disabled or Not Configured. |
|
| How To lock out a particular user only, from accessing regedit. |
First, to do so, you must have Administrative Rights.
Next, ensure that the Users account is an Administrator Account, if not, change it, to it. |
| Now open Regedit, and navigate to |
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies. |
Select the System subkey; create it if one does not exist.
Create a new DWORD value named DisableRegistry and set it to 1.
Exit. |
Change back the account type, in case you had changed it earlier.
Having done this, this user will not be able to now run regedit or merge .reg files. |
|
| How To Change Registry Key Permissions |
| Administrators and System Accounts have full control over Registry. In other's registry contexts, a user’s default permissions allow read access only. Here Edit attempts are rejected. |
|
| To change permissions for a key, right-click it, and then click Permissions on the shortcut menu. |
|
| The Permissions dialog box will open. For each account, you can allow full control, read access, deny access to the key, etc. |
| How To Restore access of the User to the Registry. |
| From another Aministrator Account, run regedit and navigate to |
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList. |
| Here select each subkey under this key, one after the other, & look at the value of ProfileImagePath. |
|
At the end of this string you will find the name of the User.
Next, find the subkey that matches the User.
The name of the subkey is the Security Identifier or the SID for that User.
Now, select the key |
HKEY_USERS\sid\Software\Microsoft\Windows\CurrentVersion\Policies\System |
Here sid is the SID that you have identified
Change the value for DisableRegistry to 0.
Exit. |
These Links May Interest You:
De-Mystifying Windows Vista Registry
How To Monitor Changes In The Registry
How To Back Up, Restore, Maintain the Vista Registry. |
|
|
|
| |
| |
