Prevent access to registry editing tools

Disables the Windows registry editor Regedit.exe.

If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action.

If you disable this policy setting or do not configure it, users can run Regedit.exe normally.

To prevent users from using other administrative tools, use the "Run only specified Windows applications" policy setting.


Supported on: At least Windows 2000
Disable regedit from running silently?


  1. Yes
    Registry HiveHKEY_CURRENT_USER
    Registry PathSoftware\Microsoft\Windows\CurrentVersion\Policies\System
    Value NameDisableRegistryTools
    Value TypeREG_DWORD
    Value2
  2. No
    Registry HiveHKEY_CURRENT_USER
    Registry PathSoftware\Microsoft\Windows\CurrentVersion\Policies\System
    Value NameDisableRegistryTools
    Value TypeREG_DWORD
    Value1


shell-commandprompt-regedittools.admx

Administrative Templates (Computers)

Administrative Templates (Users)