Jean- There's a couple of ways to do that. You can use Group Policy's built-in registry security capability or you could use a combination of a startup script (assuming the key is under HKLM) and a utility like subinacl.exe to do it. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Mesidor, Jean Sent: Thursday, July 12, 2007 12:28 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Registry Key I am trying to create a registry key to a GPO to prevent SMS installation on some clients. I am using GPMC to do that, but I can't modify the security on the key.. How can I achieve that please? Thanks, Jean