Demo on how to prevent users from accessing Windows Registry Editor by blocking access to the regedit.exe file. This is a Group Policy Object (GPO) and can be applied at a user Group Object level. Typically, I recommend blocking access to Registry Editor for all non admin users on your domain.
Since this GPO blocks the access to regedit.exe file itself, even if the user try to open it via the Run dialog box, it will be blocked from launching.
This demonstration uses Windows Server 2022 server. But the principles are same for Windows Server 2012 through 2022 (Windows Server 2022 / 2019 / 2016 / 2012). There are no GUI differences among most of the pervious versions of Windows Servers. The enforced GPO settings will work on Professional, Enterprise and Education versions of Windows client Operating Systems connected to the domain.
-Intro to Group Policy Management: [ Ссылка ]
-Create Active Directory OUs and Users: [ Ссылка ]
-Install AD DS on Windows Server 2022 Core: [ Ссылка ]
-Initial configs: [ Ссылка ]
-Windows Server Admin playlist:
[ Ссылка ]
-Microsoft Windows playlist:
[ Ссылка ]
Track: WhileART Sessions Episode 02 | Waramathi (වරමාතී) Fusion
Watch: [ Ссылка ]
[ Ссылка ]
Co-producer:
Manuja Senanayake
#windowsserver2022 #gpo #windowsserver #regedit #windows11
