Castanet Communications banner image
 
 

 
Restrict Network Access to the Registry
Author: Craig "hachiroku" Mercer
Date Created:2002-05-16
Operating System(s):Windows Logo imageWindows NT/2000/XP

Windows supports accessing a remote registry via the Registry Editor across a network. The default setting allows for users to connect and modify data within the remote registry.

Note: Because this runs as a service, this can be toggled on and off using the Services Administrative Tool in Windows 2000 and XP. Start>Settings>Control Panel>Administrative Tools>Services>Remote Registry Service

This can also be manually toggled by creating the new key listed below, or modifying the existing key if it already exits, it is possible to control access to the registry remotely.

Use REGEDT32 to modify the permissions on the key below to suit your security requirements, the permissions on this key represent the remote access permissions to the registry.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentcontrolSet\Control\SecurePipeServers\winreg

The Usual Disclaimer: Modifying the registry can cause serious problems that may require you to reinstall your operating system. Use the information provided at your own risk.