Easily Block Registry Access using Intune

In this article, we will show you how to block registry access using Intune. You can use the Intune policy to restrict access to the Windows registry editor, which will prevent users from modifying the registry on their devices.

The heart of the Windows operating system is the registry. According to Microsoft, the registry contains information that Windows continually references during operation, such as user profiles, applications, application icons, what hardware exists on the system, and the ports that are being used.

One of our clients reported a problem in which a few users were modifying the registry with the Windows Registry Editor. It was hard to track the changes that were made to the registry. Since the Windows devices were enrolled in Intune, you can use Intune to restrict access to the registry editor (regedit.exe)

Blocking registry access is essential because, if users alter the registry without first making a backup of it, it could result in serious issues that would require a complete reinstall of the operating system and result in data loss.

Intune offers an easy way to disable the registry editor for Windows users. We will create a configuration profile in Intune and use the policy “Prevent access to registry editing tools” that will completely block Windows Registry Editor (regedit.exe) for Windows users. Let’s get started.

http://forumgobelin.free.fr/viewtopic.php?t=239934

http://forumgobelin.free.fr/viewtopic.php?p=160802

http://forum2.extremum.org/viewtopic.php?f=5&t=13792

http://forum2.extremum.org/viewtopic.php?t=2579

https://australiantravelforum.com/travel/showthread.php?tid=49446

https://www.hr158.com/forum.php?mod=viewthread&tid=1421398

https://www.hr158.com/forum.php?mod=viewthread&tid=1618946

http://www.hondaikmciledug.co.id/HRIS/showthread.php?mode=threaded&tid=7&pid=8

https://talkhorror.com/boards/showthread.php?tid=2274

http://chateaugarom.free.fr/anime/forum/viewtopic.php?t=3071&view=previous

http://chateaugarom.free.fr/anime/forum/viewtopic.php?t=417&view=next

Block Registry Access using Intune

Perform the following steps to block registry access on Windows 10/11 devices using Intune:

• First, sign in to the Microsoft Intune admin center.
• Go to Devices > Windows > Configuration Profiles.
• Create a new configuration profile that will block access to registry editing tools.

Choose the following on the Create Profile page:

• Platform: Select Windows 10 and later
• Profile Type: Settings Catalog

Click Next.

Specify the policy name and a brief description of the policy. Other Intune administrators will be able to understand the policy’s purpose with these specifics.

• Name: Block Registry access using Intune
• Description: Restrict access to registry editing tools

Click Next.

http://hothyipsmonitor.com/Forum/showthread.php?tid=41277&pid=255512

http://www.txmoli.com/forum.php?mod=viewthread&tid=12743

http://www.txmoli.com/forum.php?mod=viewthread&tid=11837

http://libens.freehostia.com/viewtopic.php?t=328839&view=next

http://libens.freehostia.com/viewtopic.php?p=645648

http://www.detimgn.iboards.ru/viewtopic.php?t=15795

https://stock.talktaiwan.org/index.php?topic=383212.0

https://stock.talktaiwan.org/index.php?topic=157397.0

http://staff.akkail.com/viewtopic.php?id=2599

http://staff.akkail.com/viewtopic.php?id=2747

In the Configuration Settings section, under Settings Catalog, click Add Settings. The Intune Settings catalog allows you to enable or disable registry access for Windows users.

On the Settings picker window, type “registry editing” in the search box and click Search. From the search results, select Administrative Templates\System.

In the bottom pane, select the setting “Prevent access to registry editing tools (User).” Notice that another sub-setting, “Disable regedit from running silently? (User)” gets enabled by default. Close the Settings Picker window.

Configure the following settings to disable regedit access for Windows users:

• Prevent access to registry editing tools (user): Move the slider to the right to enable this setting. When you enable this setting, Intune will block regedit.exe access for Windows users.
• Disable regedit from running silently? (User): Click the drop-down and select Yes