diff --git a/rules/guardrails.json b/rules/guardrails.json
index 8ae013f4..e26c4096 100644
--- a/rules/guardrails.json
+++ b/rules/guardrails.json
@@ -77,6 +77,13 @@
       "prefixes": [
         "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing"
       ]
+    },
+    {
+      "category": "RealmJoin",
+      "prefixes": [
+        "SYSTEM\\CurrentControlSet\\Services\\realmjoin",
+        "SOFTWARE\\RealmJoin"
+      ]
     }
   ],
   "filePrefixes": [
diff --git a/src/Agent/AutopilotMonitor.Agent.V2/buildcounter.txt b/src/Agent/AutopilotMonitor.Agent.V2/buildcounter.txt
index dca34d14..4e18fc9c 100644
--- a/src/Agent/AutopilotMonitor.Agent.V2/buildcounter.txt
+++ b/src/Agent/AutopilotMonitor.Agent.V2/buildcounter.txt
@@ -1 +1 @@
-842
+848
diff --git a/src/Agent/AutopilotMonitor.Agent/buildcounter.txt b/src/Agent/AutopilotMonitor.Agent/buildcounter.txt
index 700bb688..f2523706 100644
--- a/src/Agent/AutopilotMonitor.Agent/buildcounter.txt
+++ b/src/Agent/AutopilotMonitor.Agent/buildcounter.txt
@@ -1 +1 @@
-1391
+1393
diff --git a/src/Web/autopilot-monitor-web/lib/guardrails.generated.ts b/src/Web/autopilot-monitor-web/lib/guardrails.generated.ts
index 06f1e81c..1495c7b9 100644
--- a/src/Web/autopilot-monitor-web/lib/guardrails.generated.ts
+++ b/src/Web/autopilot-monitor-web/lib/guardrails.generated.ts
@@ -91,6 +91,13 @@ export const REGISTRY_PREFIX_CATEGORIES: readonly GuardrailCategory[] = [
       "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing",
     ],
   },
+  {
+    category: "RealmJoin",
+    items: [
+      "SYSTEM\\CurrentControlSet\\Services\\realmjoin",
+      "SOFTWARE\\RealmJoin",
+    ],
+  },
 ];
 
 export const COMMAND_CATEGORIES: readonly GuardrailCategory[] = [
@@ -174,6 +181,8 @@ export const ALLOWED_REGISTRY_PREFIXES: readonly string[] = [
   "SOFTWARE\\Microsoft\\SystemCertificates",
   "SOFTWARE\\Policies\\Microsoft\\SystemCertificates",
   "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing",
+  "SYSTEM\\CurrentControlSet\\Services\\realmjoin",
+  "SOFTWARE\\RealmJoin",
 ];
 
 export const ALLOWED_FILE_PREFIXES: readonly string[] = [