You need to use application and device control for that,
Use this redymade policy , just modify the registry keys to your need
Using Application and Device Control to stop registry entries added by a threat or risk
http://www.symantec.com/business/support/index?page=content&id=TECH95124