Disable Regedit & Task Manager

How to disable regedit & Task Manager enterprise-wide all at once using Group Policy GPO.

As a Systems Administrator, you want to limit the user from accessing registry and task manager. This article will walk you through step-by-step of the entire process.

Launch Group Policy Management (or access it via Server Manager).

Right-click the OU you want to apply this policy to and select Create a GPO in this domain, and link it here…

 Give the new policy name. I named it as Disable Regedit & Task Manager

Right-click on Disable Regedit and Task Manager  and click edit

Expand: Computer Configuration | Preferences | Windows Settings
Right-click on Registry select Registry Item.

Set Action as Create / Update
Select Hive Option as required HKEY_CURRENT_USER (HKCU) or HKEY_LOCAL_MACHINE (HKLM).
For e.g. If you want to block user base select HKCU, if you want to block computer base select HKLM

In key path type Software\Microsoft\Windows\CurrentVersion\Policies\

In Value Name type DisableTaskMgr to block Task Manager  or DisableRegistryTools to block Regedit.

In Value Type select REG_DWORD

In Value data type 1 and click OK