How can I disable the use of regedit and regedt32?

  • Thread starter Thread starter George Hester
  • Start date Start date
G

George Hester

The reason I ask is because for some reason the two have been disabled in my
domain controller Administrator account in Windows 2000 SP4. Luckily I made
duplicate Administrator equivalent accounts when I first constructed this
machine so not all is lost but I would like to get back the control for the
original Administrator account. I believe something happened to a Group
Policy or Local Security or Domain security or Controller security or some
other security or NTFS securuity or ... Thanks.
 
Yeah on the surface that looks like it should be helpful. But if you look
closely at that solution, there is no name for the registry entry that is to
be used there. In fact the key (System) does not exist in Windows 2000 and
REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can do
with that. The link to the Group Policy Table is dead. And the Group Policy
Entry they say I can follow under User Configuration I have is Not
Configured. So it look's like that's a bum path, Maybe something like this
might work?

I would be willing to just delete the entire Policy key as I see it is
virtually empty but I forget how that is done in a .reg file. Do you recall
John? -[] I think?

How about a a windows script that would assign all permissions of one user
to another user? I could take all the permissions of one of my admin
accounts and assign them to my Administrator account. That should do it?
 
The value name is 'DisableRegistryTools' add it with value 0 This should
work. I think the 'Meaning' column descriptions on that page are reversed.
Do you get the message indicating policy restriction?



--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect
 
Hey I got it. I used this page:

http://windowsxp.mvps.org/tweakuirest.htm

I just put #1 in the Run key and that was it. I looked at that key under my
other admin accounts and there was nothing in there so I just assumed it was
that way in the Administrator account also. Turns out there was a bogus
codec called sys_vd4.dat in C:\Program Files\Common Files\System which I got
from using Firefox 2.0.0.14 the other day. I remember it because I couldn't
stop the d/l w/o crashing the application which is what I should have done.

--
George Hester
_________________________________
Dave Patrick said:
The value name is 'DisableRegistryTools' add it with value 0 This should
work. I think the 'Meaning' column descriptions on that page are reversed.
Do you get the message indicating policy restriction?
Click to expand...

Yes Dave that's what I got and Microsoft REALLY should have put
"DisableRegistryTools" in that article!!!
--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


George Hester said:
Yeah on the surface that looks like it should be helpful. But if you look
closely at that solution, there is no name for the registry entry that is
to
be used there. In fact the key (System) does not exist in Windows 2000 and
REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can
do
with that. The link to the Group Policy Table is dead. And the Group
Policy
Entry they say I can follow under User Configuration I have is Not
Configured. So it look's like that's a bum path, Maybe something like this
might work?

I would be willing to just delete the entire Policy key as I see it is
virtually empty but I forget how that is done in a .reg file. Do you
recall
John? -[] I think?

How about a a windows script that would assign all permissions of one user
to another user? I could take all the permissions of one of my admin
accounts and assign them to my Administrator account. That should do it?
Click to expand...
Click to expand...
 
It's the same thing as what was on the Microsoft page, done with a
command instead of manually.

John

George said:
Hey I got it. I used this page:

http://windowsxp.mvps.org/tweakuirest.htm

I just put #1 in the Run key and that was it. I looked at that key under my
other admin accounts and there was nothing in there so I just assumed it was
that way in the Administrator account also. Turns out there was a bogus
codec called sys_vd4.dat in C:\Program Files\Common Files\System which I got
from using Firefox 2.0.0.14 the other day. I remember it because I couldn't
stop the d/l w/o crashing the application which is what I should have done.

--
George Hester
_________________________________
The value name is 'DisableRegistryTools' add it with value 0 This should
work. I think the 'Meaning' column descriptions on that page are reversed.
Do you get the message indicating policy restriction?
Click to expand...


Yes Dave that's what I got and Microsoft REALLY should have put
"DisableRegistryTools" in that article!!!

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


George Hester said:
Yeah on the surface that looks like it should be helpful. But if you
Click to expand...
look
closely at that solution, there is no name for the registry entry that
Click to expand...
is
to
be used there. In fact the key (System) does not exist in Windows 2000
Click to expand...
and
REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can
do
with that. The link to the Group Policy Table is dead. And the Group
Policy
Entry they say I can follow under User Configuration I have is Not
Configured. So it look's like that's a bum path, Maybe something like
Click to expand...
this
might work?

I would be willing to just delete the entire Policy key as I see it is
virtually empty but I forget how that is done in a .reg file. Do you
recall
John? -[] I think?

How about a a windows script that would assign all permissions of one
Click to expand...
user
to another user? I could take all the permissions of one of my admin
accounts and assign them to my Administrator account. That should do it?
Click to expand...
Click to expand...
Click to expand...
 
Back
Top