JSI Tip 3807. How do I prevent the applications in the Registry RUN key from starting?

If you enable the Disable legacy run list Group Policy at User ConfigurationAdministrative TemplatesSystemLogon/Logoff or Computer ConfigurationAdministrative TemplatesSystemLogon/Logoff, the applications in the the Registry RUN key, at HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun and HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWindowsRun will not run when a user logs on.

If the policy is Not configured, you can implement it by setting the DisableLocalMachineRun value name, a REG_DWORD data type, to 1 at HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer or HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer.