Windows 10: How do I restrict access to REGEDIT to regular User?

Hi..
I have a Windows 10 PC. One account has admin rights and the other is regular user.
I've noticed that if I try to access regedit on the admin account, I get prompted with the UAC window and I have to click Yes to proceed... which is fine.

My problem is that if I log into the regular user account.. I can go straight into regedit without any prompts at all and it has full access.. however, if I try to access gpedit.msc, I am prompted to enter admin password.

I don't know why this is this way and it has been driving me crazy for a few days now and I cannot find a way to restrict access to regedit to the regular user account.. I know I can disable it in gpedit.msc, but I don't want to do that.. I would like for regedit to prompt me to enter the admin password.. I want to be able to access regedit when I am logged in as the regular user account, but I want it to prompt me to enter the admin password.... is this possible?

Thank you.

:)

 

HELP!! - Toshiba driver update for Toshiba Hotkey Driver - Error 0x800f0203

I'm now running Windows 10 upgraded from Windows 7 & I have the same continuous problem with the update

• Toshiba driver update for Toshiba Hotkey Driver - Error 0x800f0203

I tried your Method 1 to fix it which said changes have been made to my computer & to try & update again which failed.. again & the same message above came up again. My laptop is secure as I run Norton 360, so what should I do next to try & fix this problem?
My laptop is a Toshiba satellite L650.

Thank you

David

 

nokia lumia 710 bluetooth plays music but phone does not work on toyota

Thank you for your reply Mark.
I tried the phone with a bluetooth headset Motorola H700 that works with other phones and it did not work with the Nokia Lumia. I can hear the phone ringing through the ear piece/headset but no conversation can be heard.
It is a Windows phone 7.5 and the OS version is 7.108773.98
The car is a toyota corolla 2013 and it has the following bluetooth specifications:
Ver. 1.1, or higher (recommended: Ver. 2.1+EDR or higher. It supports the following profiles: A2DP, AVRCP, HFP, PBAP and OPP that the phone does not support. Phones like Samsung Galaxy works on the car. I never used this phone with bluetooth considering
that it is my wife's phone.
I just updated the phone minutes ago and I tried it again but it did not work.
Thank you so much for your help
J.E.

 

I found this online:
How to restrict access to the Registry Editor in Windows 10 - PCMech

 

Thanks..I've seen that, but that deactivates regedit for everyone..I dont want to deactivate it..I just want it to prompt users to enter the admin password...that way If I am logged in as regular user, I can still access it.

 

What UAC level does the regular user have set?

 

All the way up.

 

Actually, I just created another user account and by default, it grants access to regedit. This is not good at all. I've tried it on another Windows 10 PC and it's the same, regular user accounts have access to it, which is really strange.

 

You should be able to "disallow" it via "Software Restriction Policies" in Group Policy Editor

https://technet.microsoft.com/en-us/...08.06.srp.aspx

 

right.. as I mentioned on my previous post. Doing that actually disables access to regedit to everyone including admin accounts. I do not want to do that. I would like for it to prompt me for the admin password when I try to access it when logged in as a regular user...the same way gpedit.msc is setup.... I cannot access gpedit.msc as a regular user unless I enter the admin password.

 

Try to apply this in that user account.
Code: reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t REG_DWORD /d "3" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorUser" /t REG_DWORD /d "3" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "1" /f[/quote]

 

The big question is why is Windows 10 allowing regular users to have access to regedit?
I have tried on other Win 10 PCs and it's the same way.. what is Microsoft thinking?

 

You should be able to change the enforcement policy to users only

Policy Enforcement Options

There are two policy enforcement options that influence the behavior of a software restriction policy. The following options define how software restriction policies are applied for all files, including signed files:

Apply software restriction policies to the following: All files. This option includes dynamic-link libraries (DLLs).

Apply software restriction policies to the following users: All users except local administrators. This option prevents the software restriction policies from applying to local administrators.

 

How would do this? and why isn't this done by default?.. regular users should NEVER be allowed to have access to regedit.

 

It's in the actual "Software Restriction Policies" folder in GPedit Right click "enforcement" and select properties.