If this setting is enabled and the user tries to start a registry editor, a message appears explaining that a setting prevents the action.
To prevent users from using other administrative tools, use the "Run only allowed Windows applications" setting.
START > RUN > GPEDIT.MSC > USER CONFIGURATION > ADMINISTRATIVE TEMPLATES > SYSTEM > FIND PREVENT ACCESS TO REGISTRY EDITING TOOLS > RIGHT CLICK > PROPERTIES > CLICK ENABLE > OK > REBOOT