Thanks for posting your query to the forum. I did review your requirement and it seems you wanted to enable the remote registry services on multiple client workstations(Domain joined) and also need to restrict the settings to a specific AD group.
So as this is a two step requirement, (Enabling the remote registry and to specific AD group), here are the two parts solution:
a-We can achieve the activating remote registry using the group policy using the below mentioned settings:
- Open the Group Policy editor.
- Navigate to, Local Computer Policy > Computer Configuration > Policies > Windows Settings > Security Settings > System Services.
- In the right hand pane locate Remote Registry.
- Define the policy, and set the Startup type to Automatic.
b-We can make use of Security filtering and only add those computer accounts and the specific group/user to which we wanted to apply the above settings.
For more information, refer to the steps mentioned in the below link.
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/assign-security-group-filters-to-the-gpo
Hope the above information helps to fulfill your requirement.
