Edit the Group Policy.
Computer Configuration > Windows Settings > Security Settings > Registry
Add a key and select the key to secure. Then Set the rights that you want to set on that key.
Don’t go nuts locking down the registry. The user needs write access to a decent sized portion of the registry in order to work. Test everything you change on a dev system before deploying it to the entire environment.