Can't create the key for DisallowRun

Question

Hello.
I am trying to use the DisallowRun method for restricting web browsers on certain computers. I can create the disallow run *value* in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, and I can create a subkey (New Key #1) in
the same key to create the values for the various browsers to restrict, but I am unable to name that subkey *DisallowRun* as the documentation that I've seen says it needs to be named. When I try to do it in the registry editor, I get an error saying the key
cannot be renamed (although I can rename it to other names), and when I try to do it in Notepad, I get an error saying "Cannot import \\sharepath\file.reg: Error accessing the registry".
If I change the key name, however, the import is successful (for example [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun2]
 "1"="iexplore.exe").
Any ideas why I am prevented from creating the specific key name that Microsoft says the key needs to be? Is there some other policy setting that allows/disables the ability to make this key in the first place?

Answer 1

> that subkey *DisallowRun* as the documentation that I've seen says it
> needs to be named. When I try to do it in the registry editor, I get an
> error saying the key cannot be renamed (although I can rename it to
I verified (on 2012R2), and I had no problem to do so. I can create
DisallowRun, can create values, can rename and delete, all without issues.
Do you have special security software on your computers?
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))