0

I am trying to lock a registry key from getting edited by an application - specifically, I wish to lock Windows VisualEffects given that the application disables windows minimize/maximize animations.

I was thinking to keep the owner of the Key as myself, but to make Administrators and Users read-only/deny full control

Are there any negatives to doing this? Would I have to change permissions for any other groups?

0

Yes, you need to change the permission on it to prevent it from editing.

Remove group or user that you don't want them to access the Visual effects.

enter image description here

enter image description here

enter image description here

Alternatively, you can consider to push the GPO to deploy this registry value to prevent user from changing it.

  • Is there a way to change "full control" to "read" only? Everytime I tick "Deny" for "full control" in the previous dailog box, "deny" for "read" get's prechecked as well. Is there an advantage/disadvantage to removing the group or user altogether? – LeoBloom Apr 11 '18 at 22:00
  • Check my new post image. firstly you need to disable the inheritance. Then Edit button appears. Select user or group, click edit to change its permission as"read" only. Why didn't you consider GPO? – Waka Apr 12 '18 at 7:37
  • Thanks for the update Karen - I didn't consider GPO since I am not as familiar with it. That said, it seems to be a moot point now since I discovered the application somehow disables the animations without registry modification. If I prevent the application from starting at boot, the animations remain active. I will see what else I can figure out – LeoBloom Apr 12 '18 at 23:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.