Registry Privileges and Policies

In Windows NT and Windows 2000, like folders and files, Registry keys and values can have permissions set to define who has permission to view and edit them. The Windows Policies system, which allows administrators to restrict users'ability to change their computer configuration, is based on Registry access control.

In a nutshell, Administrative Policies install Registry keys and values that tell Windows administrative programs such as Control Panel to hide certain controls and settings. For example, a policy entry might make the Display Control Panel hide the Power Management settings. These restricting Registry entries are then locked into place with permission settings that prevent the users from seeing or changing them.