Disables the Windows registry editor Regedit.exe and Regedt32.exe. If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action. If you disable this policy setting or do not configure it, users can run Regedit.exe normally. To prevent users from using other administrative tools, use the "Run only specified Windows applications" policy setting. Counter Measure: Enable this setting. Potential Impact: If you enable this policy setting, a message will display when users try to use a registry editor that informs them that they cannot use either of these editors. This policy setting removes the ability of users and intruders to access the registry with these tools, but does not prevent access to the registry itself. Fix: (1) GPO: User Configuration\Administrative Templates\System\Prevent access to registry editing tools (2) REG: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools (3) WMI: ###