In this article, we will show you how to block registry access using Intune. You can use the Intune policy to restrict access to the Windows registry editor, which will prevent users from modifying the registry on their devices.
The heart of the Windows operating system is the registry. According to Microsoft, the registry contains information that Windows continually references during operation, such as user profiles, applications, application icons, what hardware exists on the system, and the ports that are being used.
One of our clients reported a problem in which a few users were modifying the registry with the Windows Registry Editor. It was hard to track the changes that were made to the registry. Since the Windows devices were enrolled in Intune, you can use Intune to restrict access to the registry editor (regedit.exe)
Blocking registry access is essential because, if users alter the registry without first making a backup of it, it could result in serious issues that would require a complete reinstall of the operating system and result in data loss.
Intune offers an easy way to disable the registry editor for Windows users. We will create a configuration profile in Intune and use the policy “Prevent access to registry editing tools” that will completely block Windows Registry Editor (regedit.exe) for Windows users. Let’s get started.
http://forumgobelin.free.fr/viewtopic.php?t=239934
http://forumgobelin.free.fr/viewtopic.php?p=160802
http://forum2.extremum.org/viewtopic.php?f=5&t=13792
http://forum2.extremum.org/viewtopic.php?t=2579
https://australiantravelforum.com/travel/showthread.php?tid=49446
https://www.hr158.com/forum.php?mod=viewthread&tid=1421398
https://www.hr158.com/forum.php?mod=viewthread&tid=1618946
http://www.hondaikmciledug.co.id/HRIS/showthread.php?mode=threaded&tid=7&pid=8
https://talkhorror.com/boards/showthread.php?tid=2274
http://chateaugarom.free.fr/anime/forum/viewtopic.php?t=3071&view=previous
http://chateaugarom.free.fr/anime/forum/viewtopic.php?t=417&view=next
Block Registry Access using Intune
Perform the following steps to block registry access on Windows 10/11 devices using Intune:
- First, sign in to the Microsoft Intune admin center.
- Go to Devices > Windows > Configuration Profiles.
- Create a new configuration profile that will block access to registry editing tools.
Choose the following on the Create Profile page:
- Platform: Select Windows 10 and later
- Profile Type: Settings Catalog
Click Next.
Specify the policy name and a brief description of the policy. Other Intune administrators will be able to understand the policy’s purpose with these specifics.
- Name: Block Registry access using Intune
- Description: Restrict access to registry editing tools
Click Next.
http://hothyipsmonitor.com/Forum/showthread.php?tid=41277&pid=255512
http://www.txmoli.com/forum.php?mod=viewthread&tid=12743
http://www.txmoli.com/forum.php?mod=viewthread&tid=11837
http://libens.freehostia.com/viewtopic.php?t=328839&view=next
http://libens.freehostia.com/viewtopic.php?p=645648
http://www.detimgn.iboards.ru/viewtopic.php?t=15795
https://stock.talktaiwan.org/index.php?topic=383212.0
https://stock.talktaiwan.org/index.php?topic=157397.0
http://staff.akkail.com/viewtopic.php?id=2599
http://staff.akkail.com/viewtopic.php?id=2747
In the Configuration Settings section, under Settings Catalog, click Add Settings. The Intune Settings catalog allows you to enable or disable registry access for Windows users.
On the Settings picker window, type “registry editing” in the search box and click Search. From the search results, select Administrative Templates\System.
In the bottom pane, select the setting “Prevent access to registry editing tools (User).” Notice that another sub-setting, “Disable regedit from running silently? (User)” gets enabled by default. Close the Settings Picker window.
Configure the following settings to disable regedit access for Windows users:
- Prevent access to registry editing tools (user): Move the slider to the right to enable this setting. When you enable this setting, Intune will block regedit.exe access for Windows users.
- Disable regedit from running silently? (User): Click the drop-down and select Yes
Comments
Post a Comment