Hi,
You can prevent the user from accessing the registry by enabling Prevent access to registry editing tools policy.
1. Type gpedit.msc into the Search box in the Start menu.
2. Navigate to User Configuration \ Administrative Templates then select System. Under Setting in the right panel double-click on Prevent access to registry editing tools.
3. Select the radio button next to Enabled, click OK, then close out of Group Policy Editor.
Hope it helps.
Tracy Cai
TechNet Community Support
