Lock registry key from edit

Question

I am trying to lock a registry key from getting edited by an application - specifically, I wish to lock Windows VisualEffects given that the application disables windows minimize/maximize animations.

I was thinking to keep the owner of the Key as myself, but to make Administrators and Users read-only/deny full control

Are there any negatives to doing this? Would I have to change permissions for any other groups?

Answer 1

Yes, you need to change the permission on it to prevent it from editing.

Remove group or user that you don't want them to access the Visual effects.

Alternatively, you can consider to push the GPO to deploy this registry value to prevent user from changing it.