Group Policy set to deny All Users from regedit and MMC snap-ins

  • Thread starter Thread starter Erick Sodhi
  • Start date Start date
E

Erick Sodhi

Greetings,
The charitable organization for which I volunteer is in a bit of a jam
with the SBS 2003 environment. Someone was messing with group policies
and has accidentally denied all users (including Admins) the ability
to launch Regedit and any of the system management snap-ins, including
the group policy editor. They're not certain exactly what they did.
Using command line tools, is it possible to recover things to a state
that will allow an Admin to undo the restrictive policies? If so,
instructions on what to do would be greatly appreciated.
Best regards,
Erick Sodhi
On behalf of the Snowsuit Fund
Ottawa, Canada
 
Greetings,
The charitable organization for which I volunteer is in a bit of a jam
with the SBS 2003 environment. Someone was messing with group policies
and has accidentally denied all users (including Admins) the ability
to launch Regedit and any of the system management snap-ins, including
the group policy editor. They're not certain exactly what they did.
Using command line tools, is it possible to recover things to a state
that will allow an Admin to undo the restrictive policies? If so,
instructions on what to do would be greatly appreciated.
Best regards,
Erick Sodhi
On behalf of the Snowsuit Fund
Ottawa, Canada
Click to expand...

Using information from tip 119 in the 'Tips & Tricks' at http://www.jsiinc.com
use the system account to remove the DisableRegistryTools from your
accounts registry.
To open the registry editor in the System Account:
AT hh:mm /interactive cmd.exe /k
where HH:MM is 2 or 3 minutes from now.
When the job runs, it will open a CMD prompt in the system account context.
In that CMD window, launch regedit and remove the DisableRegistryTools
value name from your account.

fter you logon, use tip 2472 to allow enough access to the MMCs so you
can disable the restrictions.




Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Thanks, Jerold. This worked as advertized - saved me tons of research
time, so very much appreciated..
 
Back
Top