Block users from taking action on specified registry keys or values.
Note: When creating a registry blocking rule, use the best matching
hive registry subtree abbreviation. For example, to block
HKLM\System\CurrentControlSet\Services\MyService,
choose the HKCCS hive rather than HKLM.