Prevent access to registry editing tools
- Policy ID
- DisableRegedit
- Scope
- User Configuration
- Supported on
- At least Windows 2000
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System
Description
Disables the Windows registry editor Regedit.exe.
If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action.
If you disable this policy setting or do not configure it, users can run Regedit.exe normally.
To prevent users from using other administrative tools, use the "Run only specified Windows applications" policy setting.
Options
Registry
UserHKEY_CURRENT_USER
- DisableRegistryToolsREG_DWORD