Prevent access to registry editing tools

Supported OS tags: Windows10, Windows10RT, Windows11, Windows2000, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP

Disables the Windows registry editor Regedit.exe. If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action. If you disable this policy setting or do not configure it, users can run Regedit.exe normally. To prevent users from using other administrative tools, use the "Run only specified Windows applications" policy setting.

No explicit registry values are set for enabled or disabled states.

• Computer
  Activate Shutdown Event Tracker System State Data feature

  Windows Server 2003 only
• Computer
  Allow Distributed Link Tracking clients to use domain resources

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Century interpretation for Year 2000

  At least Windows 2000
• Computer
  Configure the behavior of the sudo command

  At least Windows 11
• User
  Custom User Interface

  At least Windows 2000
• Computer
  Display highly detailed status messages

  At least Windows 2000
• Computer
  Display Shutdown Event Tracker

  At least Windows Server 2003 operating systems or Windows XP Professional
• Computer
  Do not automatically encrypt files moved to encrypted folders

  At least Windows 2000
• Computer
  Do not display Manage Your Server page at logon

  At least Windows Server 2003
• User
  Do not display the Getting Started welcome screen at logon

  Windows 2000 only
• Computer
  Do not turn off system power after a Windows system shutdown has occurred.

  At least Windows Server 2003 operating systems or Windows XP Professional with SP1
• User
  Don't run specified Windows applications

  At least Windows 2000