Page 1 of 3 123 LastLast
  1.    11 Jul 2017 #1
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro

    How do I restrict access to REGEDIT to regular User?


    Hi..
    I have a Windows 10 PC. One account has admin rights and the other is regular user.
    I've noticed that if I try to access regedit on the admin account, I get prompted with the UAC window and I have to click Yes to proceed... which is fine.

    My problem is that if I log into the regular user account.. I can go straight into regedit without any prompts at all and it has full access.. however, if I try to access gpedit.msc, I am prompted to enter admin password.

    I don't know why this is this way and it has been driving me crazy for a few days now and I cannot find a way to restrict access to regedit to the regular user account.. I know I can disable it in gpedit.msc, but I don't want to do that.. I would like for regedit to prompt me to enter the admin password.. I want to be able to access regedit when I am logged in as the regular user account, but I want it to prompt me to enter the admin password.... is this possible?

    Thank you.
      My ComputerSystem Spec
  2.    11 Jul 2017 #2
    Join Date : Jul 2016
    Granite Bay, CA
    Posts : 706
    Windows 10 Professional
      My ComputerSystem Spec
  3.    11 Jul 2017 #3
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    Thanks..I've seen that, but that deactivates regedit for everyone..I dont want to deactivate it..I just want it to prompt users to enter the admin password...that way If I am logged in as regular user, I can still access it.
      My ComputerSystem Spec
  4.    12 Jul 2017 #4
    Join Date : Oct 2014
    Trnava
    Posts : 2,863
    Windows 10.4 Home 1709 x64

    What UAC level does the regular user have set?
      My ComputerSystem Spec
  5.    12 Jul 2017 #5
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    Quote Originally Posted by TairikuOkami View Post
    What UAC level does the regular user have set?
    All the way up.
      My ComputerSystem Spec
  6.    12 Jul 2017 #6
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    Actually, I just created another user account and by default, it grants access to regedit. This is not good at all. I've tried it on another Windows 10 PC and it's the same, regular user accounts have access to it, which is really strange.
      My ComputerSystem Spec
  7.    12 Jul 2017 #7
    Join Date : Aug 2015
    Posts : 88
    Windows 10 pro 64bit

    You should be able to "disallow" it via "Software Restriction Policies" in Group Policy Editor

    https://technet.microsoft.com/en-us/...08.06.srp.aspx
      My ComputerSystem Spec
  8.    12 Jul 2017 #8
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    Quote Originally Posted by aramil View Post
    You should be able to "disallow" it via "Software Restriction Policies" in Group Policy Editor

    https://technet.microsoft.com/en-us/...08.06.srp.aspx
    right.. as I mentioned on my previous post. Doing that actually disables access to regedit to everyone including admin accounts. I do not want to do that. I would like for it to prompt me for the admin password when I try to access it when logged in as a regular user...the same way gpedit.msc is setup.... I cannot access gpedit.msc as a regular user unless I enter the admin password.
      My ComputerSystem Spec
  9.    12 Jul 2017 #9
    Join Date : Oct 2014
    Trnava
    Posts : 2,863
    Windows 10.4 Home 1709 x64

    Try to apply this in that user account.
    Code:
    reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t REG_DWORD /d "3" /f
    reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorUser" /t REG_DWORD /d "3" /f
    reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "1" /f
      My ComputerSystem Spec
  10.    12 Jul 2017 #10
    Join Date : Jun 2016
    Posts : 23
    Win 10 Pro
    Thread Starter

    The big question is why is Windows 10 allowing regular users to have access to regedit?
    I have tried on other Win 10 PCs and it's the same way.. what is Microsoft thinking?
      My ComputerSystem Spec

 
Page 1 of 3 123 LastLast


Similar Threads
Thread Forum
Solved How to move User Folder and Restrict Access to other Drives/Partition
Hi, everyone. I just recently joined this forum with the intent of getting help in setting up a new computer. I've done a fair share of research in this (and other) forum, but the variety of solutions I found left me confused more than ever. I...
Installation and Upgrade
restrict user to run only a few applications Windows Home edition
Hi. I created a user name titled "Visitor". How can I (without a lot of registry changes) allow Visitor to run only 5 or 6 applications. I have created a unique desktop for Visitor with only those icons. Visitor is not a family member. Or...
Software and Apps
How to restrict wi-fi internet access to kids?
Hi, At home we access to the internet wirelessly by means of a modem-router TP-Link Archer MR200, through a SIM and 4G link. The problem is that after the first connection the wi-fi network key of the modem-router remains memorized in the device...
Network and Sharing
Restrict program access and startup for second user?
Is there any easy way to restrict program access and startup for second user? I need to share my pc for a short time, and would want to restrict what programs show in startmenu and start at boot. Tried a new local account and new family member,...
User Accounts and Family Safety
How to restrict standard user access to folders
On my secondary hard drive, I have some folders that I don't want standard users to see or access. How can I go about doing this? Thanks!
User Accounts and Family Safety
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 10:31.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums