Determine if interactive users can generate Resultant Set of Policy data: registry value DenyRsopToInteractiveUser (HKLM System)ComputerHKLM\Software\Policies\Microsoft\Windows\System

Policy ID
DenyRsopToInteractiveUser_2
Scope
Computer Configuration
Supported on
At least Windows Server 2003 operating systems or Windows XP Professional
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
System › Group Policy

Registry

DenyRsopToInteractiveUser

REG_DWORDComputer
Enabled value
1
Disabled value
0
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System]

; Options (use only one)
; Enabled
"DenyRsopToInteractiveUser"=dword:00000001
; Disabled
"DenyRsopToInteractiveUser"=dword:00000000
CMD
:: Options (use only one)

:: Enabled
reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "DenyRsopToInteractiveUser" /t REG_DWORD /d 1 /f
:: Disabled
reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "DenyRsopToInteractiveUser" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\System' -Force | Out-Null

# Options (use only one)
# Enabled
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\System' -Name 'DenyRsopToInteractiveUser' -PropertyType DWord -Value 1 -Force | Out-Null
# Disabled
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\System' -Name 'DenyRsopToInteractiveUser' -PropertyType DWord -Value 0 -Force | Out-Null