Registry blocking rule options

Registry blocking rules prevent users and unauthorized programs from altering, opening, or deleting specified registry keys and values.

Note: When creating a registry blocking rule, use the best matching hive registry subtree abbreviation. For example, to block HKLM\System\CurrentControlSet\Services\MyService, choose the HKCCS hive rather than HKLM.

Option definitions


Option Definition
Rule Name Specify the name for this rule.
Processes to include Restrict access to the specified processes.
Processes to exclude Allow access to the specified processes.
Registry key or value to protect Protect this registry key or value:
  • Select a root key or value from the drop-down list.
  • Type a key or value in the text box.

Selecting the root key or value from the drop-down list is optional. Use either of these methods to specify the key or value:

  • Select the root key or value from the drop-down list, then type the remaining path to the key or value in the text box.
  • Type the full path to the key or value in the text box.
Rule type Select the type of rule:
  • Key — This rule protects the specified key.
  • Value — This rule protects the specified value.
Write to key or value Block writing to the specified key or value.
Create key or value Block creating the specified key or value.
Delete key or value Block deleting the specified key or value.

Registry blocking rule options