I want to disable regedit, gpedit, and device manager

[hit]

Hello
I want to disable regedit, gpedit, and device manager. I did that in the current user registry key..But how to disable in the Local Machine key???

 

[Dwarf]

Hi hit and welcome to W7 Forums

In exactly the same way, only you need to invoke regedit to run with administrative privileges. The question is: Why?

 

[patio]

I'm also curious as to why...

 

[hit]

thanks all
Am developing an application that disables detecting mass storage devices.Developing this application needs disabling such tasks to avoid advanced users, which are logged as standard accounts,from accessing regedit.So, my application must run only using the admin account, and disable these tasks for all the other standard accounts..this is the reason and thanks in advance

 

[arkhi]

First things first, your specs says you have Home Premium, which at the first place doesn't have gpedit.msc anyway so you're good on that part.

Regedit - Enable or Disable - Vista Forums

And for Device Manager, quoting TechNet (http://technet.microsoft.com/en-us/library/cc778901(WS.10).aspx):

Ability to disable: You cannot disable Device Manager, but you can use Control Panel or Group Policy to prevent hardware wizards from searching for drivers on Windows Update. Alternatively, you can turn off all access to Windows Update

You can also add the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmc.exe
 
Name (String): Debugger
Value: <none>

This potentially disables ALL mmc items from functioning. To undo, simply delete the mmc.exe key.