{"id":19909,"date":"2024-02-07T01:51:58","date_gmt":"2024-02-07T01:51:58","guid":{"rendered":"https:\/\/www.insentragroup.com\/us\/insights\/uncategorized\/block-access-to-windows-registry-with-intune\/"},"modified":"2024-12-06T00:35:28","modified_gmt":"2024-12-06T00:35:28","slug":"block-access-to-windows-registry-with-intune","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/us\/insights\/geek-speak\/secure-workplace\/block-access-to-windows-registry-with-intune\/","title":{"rendered":"Block access to Windows Registry with Intune\u00a0"},"content":{"rendered":"\n

In recent months, I’ve frequently engaged in discussions about how organizations can effectively block users from accessing and altering crucial registry keys. The aim of this blog is to offer clear, step-by-step instructions, empowering you to seamlessly implement these security measures within your organisation.<\/p>\n\n\n\n

    \n
  1. Sign in to https:\/\/aka.ms\/intune<\/a> using your admin credentials<\/li>\n\n\n\n
  2. Click on Devices > Windows > Configuration Profiles<\/li>\n\n\n\n
  3. Click Policies > Create New Policy<\/li>\n<\/ol>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
      \n
    1. On the create profile page: 
      Select Platform : Select Windows 10 and later<\/li>\n<\/ol>\n\n\n\n

      Profile Type :  Settings catalog, Click Create<\/p>\n\n\n\n

      \"\"<\/figure>\n\n\n\n
        \n
      1. In Create Profile page enter a name and description in accordance with your organisation standards, Click Next<\/li>\n<\/ol>\n\n\n\n
        \"\"<\/figure>\n\n\n\n
          \n
        1. In the Configuration Settings section, click Add Settings.<\/li>\n<\/ol>\n\n\n\n
          \"\"<\/figure>\n\n\n\n
            \n
          1. Under settings picker, you would find a search option: Type Registry and then hit Search.<\/li>\n<\/ol>\n\n\n\n
            \"\"<\/figure>\n\n\n\n
              \n
            1. From the search results, select Administrative TemplatesSystem<\/li>\n\n\n\n
            2. You would find 2 results in the system subcategory, Check the box next to Prevent access to registry editing tools, then expand the right arrow. You will find that the settings for disabling access to regedit gets enabled by default.<\/li>\n<\/ol>\n\n\n\n
              \"\"<\/figure>\n\n\n\n
                \n
              1. Close the settings picker windows <\/li>\n\n\n\n
              2. You will be presented with the below page,<\/li>\n<\/ol>\n\n\n\n
                \"\"<\/figure>\n\n\n\n
                  \n
                1. Enable the slider for Prevent access to registry editing tools. Once you do that, for Disable regedit from running silently<\/strong>, make sure you select Yes <\/strong>from the dropdown menu. Click Next <\/li>\n<\/ol>\n\n\n\n
                  \"\"<\/figure>\n\n\n\n
                    \n
                  1. Scope tags is optional, but if you have distributed IT you just as might as well go for it<\/li>\n\n\n\n
                  2. In the assignments page, apply the policy to a group of users that you would like to restrict access for.<\/li>\n\n\n\n
                  3. In the Review and create page, review all the settings before you can hit create.<\/li>\n\n\n\n
                  4. To verify watch out for the notification, stating \u201cPolicy created successfully\u201d<\/li>\n<\/ol>\n\n\n\n

                    Voila! You have successfully configured restrictions to Windows registry for your end users. Hope this helped and do contact us<\/a> if you have any questions around having robust modern device management for your organization. Explore more insights and expert advice in our comprehensive guide, ‘The Ultimate Guide to Microsoft Intune<\/a>.’ Elevate your device management game today!\u00a0<\/p>\n\n\n\n

                    Until next time, hasta-la-vista!<\/p>\n","protected":false},"excerpt":{"rendered":"

                    Learn how to block access to Windows Registry with Intune. Follow our step-by-step guide for secure device management.<\/p>\n","protected":false},"author":9,"featured_media":19926,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[20],"tags":[],"class_list":["post-19909","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-secure-workplace","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/posts\/19909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/comments?post=19909"}],"version-history":[{"count":9,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/posts\/19909\/revisions"}],"predecessor-version":[{"id":19927,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/posts\/19909\/revisions\/19927"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/media\/19926"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/media?parent=19909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/categories?post=19909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/us\/wp-json\/wp\/v2\/tags?post=19909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}