Windows 10: How do I restrict access to REGEDIT to regular User?

Page 3 of 3 FirstFirst 123
  1.    13 Jul 2017 #21

    Standard users don't have full access to regedit.

    They can change things in the current user (i.e. their user) hive but not other hives (local machine etc) as they aren't authorized.
      My ComputerSystem Spec

  2.    13 Jul 2017 #22

    Yes, the changes would (should) only apply to the local account but I'm guessing the OP doesn't want those changed as well.
      My ComputerSystem Spec


  3. Posts : 348
    Win 7 Pro/32, Win 10 Pro/64/32
       13 Jul 2017 #23

    To prevent unauthorized persons from running certain programs, just change the name of the program.
    I've used that many times in the past, even on my Commodore 64.

    Cheers Mates!
    TechnoMage

    PS: To change a file's name, you will probably have to "Take Ownership" of that file.
    The program "Grant Admin Full Control" will do that for you. It's FREE!
      My ComputerSystem Spec

  4.    13 Jul 2017 #24

    So nobody knows why Windows 10 is allowing for a regular user account to have access to the registry?
    I mean, this was not the case in previous Windows OS..access to the registry has always been Admin access ONLY.
      My ComputerSystem Spec

  5.    13 Jul 2017 #25

    macster2075 said: View Post
    So nobody knows why Windows 10 is allowing for a regular user account to have access to the registry?
    --- If we could call on the MSFT gods, I'm sure they know but I doubt they'd let us know.
    I mean, this was not the case in previous Windows OS..access to the registry has always been Admin access ONLY.
    --- I believe you are correct but I don't know which was the last version it worked that way.
    According to this article "Running commands like Regedit as a standard user"
    Running commands like Regedit as a standard user
    it states "I can view and change values under "Current User", but only can view values under "Local Machine" (cannot change)."
    --- Although it's for Windows 7, test it out on your Windows 10.
    --- Look for values in hives other than Local Machine and see if that statement is true.
    --- Determine whether or not viewing and changing values are only possible under Current User.
    BTW, Ix07 & sygnus21 have mentioned those items (maybe also others on previous pages but I don't know how to go back to double-check while posting this information).
    --- So hopefully a standard user really is has limited capabilities
    --- If you do evaluate what that article points out, please let us know what you find out.

    EDIT: I just created a local account and the statement "it states "I can view and change values under "Current User", but only can view values under "Local Machine" (cannot change)." appears to be true. I really didn't want to make changes since I don't know what I would want to experiment with on what to change.
    --- However, the ability to change values under "Current User" makes sense
    --- Delving into Local Machine brought "xxx cannot be opened" which amounts to being unable to make changes.
    Checking the remaining hives, it appears to be able to modify some of the folder contents but I wasn't about to play with any of them.
    --- If you find something in the remaining hives to modify an entry your way: please let us know how it goes.
    Last edited by MeAndMyComputer; 13 Jul 2017 at 20:17.
      My ComputersSystem Spec

  6.    13 Jul 2017 #26

    macster2075 said: View Post
    So nobody knows why Windows 10 is allowing for a regular user account to have access to the registry?
    I mean, this was not the case in previous Windows OS..access to the registry has always been Admin access ONLY.
    Correct, nobody knows why it's doing that... because it doesn't. I promise you, your normal users do not have full access to regedit. They can only edit the HKEY_CURRENT_USER hive. They cannot edit HKEY_LOCAL_MACHINE hive.
      My ComputerSystem Spec


 
Page 3 of 3 FirstFirst 123

Related Threads
Hi, everyone. I just recently joined this forum with the intent of getting help in setting up a new computer. I've done a fair share of research in this (and other) forum, but the variety of solutions I found left me confused more than ever. I...
Hi. I created a user name titled "Visitor". How can I (without a lot of registry changes) allow Visitor to run only 5 or 6 applications. I have created a unique desktop for Visitor with only those icons. Visitor is not a family member. Or...
Hi, At home we access to the internet wirelessly by means of a modem-router TP-Link Archer MR200, through a SIM and 4G link. The problem is that after the first connection the wi-fi network key of the modem-router remains memorized in the device...
Restrict program access and startup for second user? in User Accounts and Family Safety
Is there any easy way to restrict program access and startup for second user? I need to share my pc for a short time, and would want to restrict what programs show in startmenu and start at boot. Tried a new local account and new family member,...
How to restrict standard user access to folders in User Accounts and Family Safety
On my secondary hard drive, I have some folders that I don't want standard users to see or access. How can I go about doing this? Thanks!
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 16:28.
Find Us