Can I use group policy to set the permissions on registry keys?

I know that I can use group policy preferences to set registry key values on a Windows 7 computer. But is it possible to apply registry key permissions using group policy?

Note: I’ve seen this post about writing scripts using SubInAcl but was trying to find a way to use a group policy without a script.

Yes; from the Group Policy Object Editor, expand Computer Configuration > Windows Settings > Security Settings. You should see a Registry option, where you can add keys and specify permissions.

Note that just allows you to play with permissions; i.e. this is different from Group Policy Preferences, where you can actually set values

Check more discussion of this question.

Related posts:

1. Push new registry keys via group policy
2. Set Registry Keys from Domain Policy
3. Software restriction policies set in the registry don’t update Local Group Policy
4. Two identical Vista machines, only one processes Group Policy Registry Extension
5. How can I set fine-grained registry permissions on servers remotely?