How can I disable the use of regedit and regedt32?

[Guest George Hester]

The reason I ask is because for some reason the two have been disabled in my

domain controller Administrator account in Windows 2000 SP4. Luckily I made

duplicate Administrator equivalent accounts when I first constructed this

machine so not all is lost but I would like to get back the control for the

original Administrator account. I believe something happened to a Group

Policy or Local Security or Domain security or Controller security or some

other security or NTFS securuity or ... Thanks.

 

--

George Hester

_________________________________

[Guest John John (MVP)]

Re: How can I disable the use of regedit and regedt32?

 

DisableRegistryTools

http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/93466.mspx?mfr=true

 

John

 

 

George Hester wrote:

> The reason I ask is because for some reason the two have been disabled in my

> domain controller Administrator account in Windows 2000 SP4. Luckily I made

> duplicate Administrator equivalent accounts when I first constructed this

> machine so not all is lost but I would like to get back the control for the

> original Administrator account. I believe something happened to a Group

> Policy or Local Security or Domain security or Controller security or some

> other security or NTFS securuity or ... Thanks.

>

> --

> George Hester

> _________________________________

>

>

[Guest George Hester]

Re: How can I disable the use of regedit and regedt32?

 

Yeah on the surface that looks like it should be helpful. But if you look

closely at that solution, there is no name for the registry entry that is to

be used there. In fact the key (System) does not exist in Windows 2000 and

REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can do

with that. The link to the Group Policy Table is dead. And the Group Policy

Entry they say I can follow under User Configuration I have is Not

Configured. So it look's like that's a bum path, Maybe something like this

might work?

 

I would be willing to just delete the entire Policy key as I see it is

virtually empty but I forget how that is done in a .reg file. Do you recall

John? -[] I think?

 

How about a a windows script that would assign all permissions of one user

to another user? I could take all the permissions of one of my admin

accounts and assign them to my Administrator account. That should do it?

 

--

George Hester

_________________________________

"John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message

news:e0Eg8R6EJHA.4336@TK2MSFTNGP05.phx.gbl...

> DisableRegistryTools

>

http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry

/93466.mspx?mfr=true

>

> John

>

>

> George Hester wrote:

>

> > The reason I ask is because for some reason the two have been disabled

in my

> > domain controller Administrator account in Windows 2000 SP4. Luckily I

made

> > duplicate Administrator equivalent accounts when I first constructed

this

> > machine so not all is lost but I would like to get back the control for

the

> > original Administrator account. I believe something happened to a Group

> > Policy or Local Security or Domain security or Controller security or

some

> > other security or NTFS securuity or ... Thanks.

> >

> > --

> > George Hester

> > _________________________________

> >

> >

[Guest Dave Patrick]

Re: How can I disable the use of regedit and regedt32?

 

The value name is 'DisableRegistryTools' add it with value 0 This should

work. I think the 'Meaning' column descriptions on that page are reversed.

Do you get the message indicating policy restriction?

 

 

 

--

 

Regards,

 

Dave Patrick ....Please no email replies - reply in newsgroup.

Microsoft Certified Professional

Microsoft MVP [Windows]

http://www.microsoft.com/protect

 

 

"George Hester" wrote:

> Yeah on the surface that looks like it should be helpful. But if you look

> closely at that solution, there is no name for the registry entry that is

> to

> be used there. In fact the key (System) does not exist in Windows 2000 and

> REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can

> do

> with that. The link to the Group Policy Table is dead. And the Group

> Policy

> Entry they say I can follow under User Configuration I have is Not

> Configured. So it look's like that's a bum path, Maybe something like this

> might work?

>

> I would be willing to just delete the entire Policy key as I see it is

> virtually empty but I forget how that is done in a .reg file. Do you

> recall

> John? -[] I think?

>

> How about a a windows script that would assign all permissions of one user

> to another user? I could take all the permissions of one of my admin

> accounts and assign them to my Administrator account. That should do it?

>

> --

> George Hester

[Guest George Hester]

Re: How can I disable the use of regedit and regedt32?

 

Hey I got it. I used this page:

 

http://windowsxp.mvps.org/tweakuirest.htm

 

I just put #1 in the Run key and that was it. I looked at that key under my

other admin accounts and there was nothing in there so I just assumed it was

that way in the Administrator account also. Turns out there was a bogus

codec called sys_vd4.dat in C:\Program Files\Common Files\System which I got

from using Firefox 2.0.0.14 the other day. I remember it because I couldn't

stop the d/l w/o crashing the application which is what I should have done.

 

--

George Hester

_________________________________

"Dave Patrick" <DSPatrick@nospam.gmail.com> wrote in message

news:u029uV7EJHA.4104@TK2MSFTNGP04.phx.gbl...

> The value name is 'DisableRegistryTools' add it with value 0 This should

> work. I think the 'Meaning' column descriptions on that page are reversed.

> Do you get the message indicating policy restriction?

 

Yes Dave that's what I got and Microsoft REALLY should have put

"DisableRegistryTools" in that article!!!

>

>

>

> --

>

> Regards,

>

> Dave Patrick ....Please no email replies - reply in newsgroup.

> Microsoft Certified Professional

> Microsoft MVP [Windows]

> http://www.microsoft.com/protect

>

>

> "George Hester" wrote:

> > Yeah on the surface that looks like it should be helpful. But if you

look

> > closely at that solution, there is no name for the registry entry that

is

> > to

> > be used there. In fact the key (System) does not exist in Windows 2000

and

> > REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can

> > do

> > with that. The link to the Group Policy Table is dead. And the Group

> > Policy

> > Entry they say I can follow under User Configuration I have is Not

> > Configured. So it look's like that's a bum path, Maybe something like

this

> > might work?

> >

> > I would be willing to just delete the entire Policy key as I see it is

> > virtually empty but I forget how that is done in a .reg file. Do you

> > recall

> > John? -[] I think?

> >

> > How about a a windows script that would assign all permissions of one

user

> > to another user? I could take all the permissions of one of my admin

> > accounts and assign them to my Administrator account. That should do it?

> >

> > --

> > George Hester

>

[Guest John John (MVP)]

Re: How can I disable the use of regedit and regedt32?

 

It's the same thing as what was on the Microsoft page, done with a

command instead of manually.

 

John

 

George Hester wrote:

> Hey I got it. I used this page:

>

> http://windowsxp.mvps.org/tweakuirest.htm

>

> I just put #1 in the Run key and that was it. I looked at that key under my

> other admin accounts and there was nothing in there so I just assumed it was

> that way in the Administrator account also. Turns out there was a bogus

> codec called sys_vd4.dat in C:\Program Files\Common Files\System which I got

> from using Firefox 2.0.0.14 the other day. I remember it because I couldn't

> stop the d/l w/o crashing the application which is what I should have done.

>

> --

> George Hester

> _________________________________

> "Dave Patrick" <DSPatrick@nospam.gmail.com> wrote in message

> news:u029uV7EJHA.4104@TK2MSFTNGP04.phx.gbl...

>

>>The value name is 'DisableRegistryTools' add it with value 0 This should

>>work. I think the 'Meaning' column descriptions on that page are reversed.

>>Do you get the message indicating policy restriction?

>

>

> Yes Dave that's what I got and Microsoft REALLY should have put

> "DisableRegistryTools" in that article!!!

>

>

>>

>>

>>--

>>

>>Regards,

>>

>>Dave Patrick ....Please no email replies - reply in newsgroup.

>>Microsoft Certified Professional

>>Microsoft MVP [Windows]

>>http://www.microsoft.com/protect

>>

>>

>>"George Hester" wrote:

>>

>>>Yeah on the surface that looks like it should be helpful. But if you

>

> look

>

>>>closely at that solution, there is no name for the registry entry that

>

> is

>

>>>to

>>>be used there. In fact the key (System) does not exist in Windows 2000

>

> and

>

>>>REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can

>>>do

>>>with that. The link to the Group Policy Table is dead. And the Group

>>>Policy

>>>Entry they say I can follow under User Configuration I have is Not

>>>Configured. So it look's like that's a bum path, Maybe something like

>

> this

>

>>>might work?

>>>

>>>I would be willing to just delete the entire Policy key as I see it is

>>>virtually empty but I forget how that is done in a .reg file. Do you

>>>recall

>>>John? -[] I think?

>>>

>>>How about a a windows script that would assign all permissions of one

>

> user

>

>>>to another user? I could take all the permissions of one of my admin

>>>accounts and assign them to my Administrator account. That should do it?

>>>

>>>--

>>>George Hester

>>

>

>