Hi all, as the name of this thread says ,i recently realized that this option in my GPO is not functioning anymore for my admin account and i suspect some registry entry has been changed silently,from my standard user it is still blocking it but not in my admin account anymore??!!??? where specificly i can check to see what has been changed? it would always block even my admin account from running the registry(regedit.exe) till i uncheck the option in order to make some changes in reg then switch back to block it...i created applocker rules for all registry apps but i also want this functionality to work to enforce rules,how can i restore this specific policy?will b lookin forward for replies!!kind regards,RR

No not yet?

DDOS Evader,Since Windows Vista you can target local GPO to 3 Targets. A specific user Adminstrators Non - Administrators So, probably you targeted your GPO to the Non-Administratorsgroup.If you want to set the same GPO for administators you need to create the same GPO and target theadministrator group.Kind RegeardsDFTIM me - TWiTTer: @DFTER

Hi Daft,well it used to work for admin as well,but how do i create GPOs?sorry if that is a stupid question but i dunno how to create a GPO and target to Admin group..Kind regards,RRPS: if u have a how-to guide i apreciate !