User can use registry editor

User can use registry editor: Almost all of Windows' security settings and configuration parameters are stored in the registry database.

If users can access the registry directly with the registry editor (REGEDIT.EXE) it is very easy for them to change their own rights and permissions if they have the necessary knowledge, which makes security strategies pointless. In addition to this, inexperienced users can do serious damage to the system by "playing" with the registry editor.

• Disabling this option significantly increases system security by preventing users from using the registry editor.

• Active Immediately

  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

  DWord <given below> Value 1

   

• DisableRegistryTools    -    User can use registry editor

• NoDispCPL                    -    User can access Display settings

• NoDispScrSavPage       -    User can configure screen saver

• NoDispBackgroundPage   -    User can configure desktop background

• NoDispAppearancePage   -    User can configure desktop appearance