Restricting Registry Access

  • Thread starter Thread starter Kellie
  • Start date Start date
K

Kellie

How can I restrict a user from downloading a program that
accesses the registry? Can this be done through Group
Policy? (ie, I do not want any of my users to download
programs like AIM, Kazaa, etc.) Thank you.
 
Yes you can use a GPO to do it.
In the Computer Configuration\Windows Settings\Security Settings\Registry
you can set permissions for the Registry.

Regards,
/Jimmy
 
Well I would think so. You want to make sure in Internet Explorer security options that File download is disabled and cannot be renabled. For that you would have a group policy that prohibits changing that option. Using Administrative Tempolates in User Configuration of Group Policy there is an option to Disable the Security page. Enable that.
 
Which key do I select, and do I remove their permissions
for that key?

Thank you.

Kellie
 
Depends on the program, you can use Regmon from www.sysinternals.com to find
which key(s) it uses.
If should be sufficient to set Read only if it's not in the User key.

Regards,
/Jimmy
 
Back
Top