System Restore turned off by group policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Recently infected with FatsoA worm. XP Pro. All clear now, main desktop and
admin. I have read many posts on this topic and have tried disabling SR and
DisableConfig. I have searched for other disable config in the registry-
none. I have downloaded patch #278 from Kelly's Korner (which is now stuck on
there). There are now SR tabs in System properties (and this is progress)
but it says it is turned off. Advice please?

Thanks for your help.
 
A clarification as my subject isn't clear in the header: my problem is the
message "System Restore has been turned off by group policy. To turn on SR
contact your domain administrator".
 
Yed,

Here is my standard advice, which resolves the problem in all cases. It's
possible that you;ve followed a part of the article, but it looks to me that
the DisableConfig value is still existing in the registry (so that the SR
group policy restriction shown in Properties). Read below:

As more issues of this sort are showing up lately, i think this may be
caused by malware / trojan etc. It's a good idea to do a clean-up. Follow
the advice given in the following pages:

Generic Trojan / Adware Infestation Removal Procedure:
http://www.claymania.com/removal-trojan-adware.html

The Parasite Fight - Quick Fix Protocol:
http://aumha.org/a/quickfix.php

Once you're sure that the system is clean, disable the System Restore
restrictions. Follow this:

Click Start/Run and type REGEDIT
Navigate to the following key:

HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore

In the right-pane,
Delete the value "DisableConfig"
Delete the value "DisableSR"

For Windows XP Professional, you can accomplish the above task using Group
Policy Editor as well. Details follows:

Click Start/Run and type GPEDIT.MSC
Navigate to this path:

=>Computer Configuration
==>Administrative Templates
===>System
====>System Restore

In the right-pane, do the following:

Double-click "Turn off System Restore" to "Not Configured"
Double-click "Turn off Configuration" to "Not Configured"

More Information:
------------------

"Turn off System Restore" corresponds to "DisableSR" registry value
-> With this Policy is turned ON, the System Restore tab may be missing
in My Computer Properties. Also, when you run System Restore (rstrui.exe),
you receive this message:

[Msg] "System Restore has been turned off by group policy. To turn on
System Restore, contact your domain Administrator." [/Msg]


"Turn off Configuration" corresponds to "DisableConfig" registry value
-> With this Policy turned ON, the System Restore tab will remain
displayed but the user cannot configure the SR options. It reads "disabled
by Group Policy"
 
Back
Top