enable registry editor in winxp
Page 1 of 2 1 2 LastLast
Results 1 to 15 of 16

Thread: enable registry editor in winxp

  1. #1
    Registered User
    Join Date
    Oct 2002
    Posts
    190

    enable registry editor in winxp

    Running winxp pro in a w2k server domain currently the registry editor has been disabled on these winxp pro machines eventhough logged in as a domain adminstrator keep getting this error message " The administrator has disabled registry editor"
    The strange thing is even logged in as a local admin i still get this message & regisrty editing is still disabled.
    Any advise on how i can regain registry editing on these winxp machines. I've upgraded all the machines to winxp pro so i nolonger have any w2k workstation.
    Thanks in advance

  2. #2
    Driver Terrier NooNoo's Avatar
    Join Date
    Dec 2000
    Location
    UK
    Posts
    31,824
    tried safe mode?

    Tried checking the local policies? If you cannot open local policies then it may be an indicator of a trojan.


    there is a vbs script here that may help
    Never, ever approach a computer saying or even thinking "I will just do this quickly."

  3. #3
    Registered User
    Join Date
    Oct 2002
    Posts
    190
    Quote Originally Posted by NooNoo
    tried safe mode?

    Tried checking the local policies? If you cannot open local policies then it may be an indicator of a trojan.


    there is a vbs script here that may help
    Hi! i can go into local policy but not regedit also i cannot go into the link you gave me i need to signup inorder to access the page

  4. #4
    Geezer confus-ed's Avatar
    Join Date
    Jul 1999
    Location
    In front of my PC....
    Posts
    13,087
    Quote Originally Posted by NooNoo
    tried safe mode?

    Tried checking the local policies? If you cannot open local policies then it may be an indicator of a trojan.
    So my turn to be the voice of caution ! (as I got so much 'pooh' last time I ventured an answer to a 'security' issue !!) .. Or it may be an indicator that this particular user doesn't have sufficient access privilege for a reason !!!

    .. cannot go into the link you gave me i need to signup inorder to access the page..
    No signups required - if you really do have domain admin access, everythings there except maybe this bit ..
    ..REGEDIT.EXE is based on the Windows95 version and has features that REGEDT32.EXE lacks (such as search). In general REGEDIT.EXE is nicer to work with. REGEDIT.EXE also shows your current position in the registry at the bottom of the window.

    REGEDT32.EXE allows full ACL modification on all registry values which REGEDIT.EXE does not.
    ACL (Access Control List) here means that domain wide restrictions are only 'doable' with regedt32.

  5. #5
    Banned Ya_know's Avatar
    Join Date
    Jun 2001
    Posts
    10,692
    In local group policy (start/run type cmd, enter, at the command prompt type gpedit.msc, do it this way to prevent showing this command in the start/run most recently used list).

    Then under <Local Computer Policy\Administrative template\System> then under the other pane you will see "Prevent access to registry editing tools".

    Under the Explain tab it says this:
    Disables the Windows registry editors, Regedit.exe and Regedit.exe.

    If this setting is enabled and the user tries to start a registry editor, a message appears explaining that a setting prevents the action.

    To prevent users from using other administrative tools, use the "Run only allowed Windows applications" setting.

  6. #6
    Registered User
    Join Date
    Oct 2002
    Posts
    190
    Quote Originally Posted by Ya_know
    In local group policy (start/run type cmd, enter, at the command prompt type gpedit.msc, do it this way to prevent showing this command in the start/run most recently used list).

    Then under <Local Computer Policy\Administrative template\System> then under the other pane you will see "Prevent access to registry editing tools".

    Under the Explain tab it says this:
    i've tried that under the " disable registry editing tools" it is not configured do i need to disable this option so i can gain access to registry for my user terminal?

  7. #7
    Banned Ya_know's Avatar
    Join Date
    Jun 2001
    Posts
    10,692
    Well if it shows as not configured then something else is causing your problem. Did you try disabling it to see if that resolves your issue? You never know...

    Is there a domain issued policy being distributed to this PC/user that could be over riding the local policy?


    Did you try regdt32.exe as was suggested by confus-ed? Because if both tools are disabled, then you have a sure bet that Group policy is to blame, if it's just one, then it may be something fishy.

    You say all the new XP machines do this, who configured them, or where did you buy them from? Is it something that someone else implemented that you could follow up with to get the straight scoop?

  8. #8
    Registered User
    Join Date
    Oct 2002
    Posts
    190
    Quote Originally Posted by Ya_know
    Well if it shows as not configured then something else is causing your problem. Did you try disabling it to see if that resolves your issue? You never know...

    Is there a domain issued policy being distributed to this PC/user that could be over riding the local policy?


    Did you try regdt32.exe as was suggested by confus-ed? Because if both tools are disabled, then you have a sure bet that Group policy is to blame, if it's just one, then it may be something fishy.

    You say all the new XP machines do this, who configured them, or where did you buy them from? Is it something that someone else implemented that you could follow up with to get the straight scoop?
    the regedt32.exe does not work as well; you've any idea where i should configure it in the domain policy to enable the regedit feature i'm trying to configure the domain policy such that the users cannot use the registry editing tools but i've yet to configure it & it already does not work

  9. #9
    Banned Ya_know's Avatar
    Join Date
    Jun 2001
    Posts
    10,692
    That's the thing, registry editing is enabled by default, so something is in place that turned it off. Have you tried logging into the PC as the local administrator? And this same thing takes place?

    I have seen in trusted multi-domain environments where a domain admin is defaulted in the local admin group, but the domain admin of another domain isn't, thus local administration tasks are not permitted, even as a domain admin (of the alternate domain) Are you in any environment that might cause this sort of thing to happen?

    As far as suggesting the GPO function to use, isn’t it in the same place under the administrative template under the User Configuration? You also need to reconcile all policies, and ensure that one isn’t overriding another. Does anyone else have access to your GPO’s, or you’re active directory, that could be implementing this without your awareness?

  10. #10
    Registered User edball's Avatar
    Join Date
    Apr 2001
    Location
    Oklahoma
    Posts
    1,884
    Quote Originally Posted by kababoom
    the regedt32.exe does not work as well; you've any idea where i should configure it in the domain policy to enable the regedit feature i'm trying to configure the domain policy such that the users cannot use the registry editing tools but i've yet to configure it & it already does not work
    After you change it, are you saving the policy back out to a net logon directory ?
    "Don't be so humble - you are not that great." - Golda Meir

  11. #11
    Registered User
    Join Date
    Oct 2002
    Posts
    190
    Quote Originally Posted by edball
    After you change it, are you saving the policy back out to a net logon directory ?
    tried safe mode local admin also do not work i'm also in the domain admin group as well is there any place in the group policy that i might have disabled it i've excluded admin & domain admin not to be affected by the group policy i've set but still this error occurs

  12. #12
    Registered User edball's Avatar
    Join Date
    Apr 2001
    Location
    Oklahoma
    Posts
    1,884
    Quote Originally Posted by kababoom
    tried safe mode local admin also do not work i'm also in the domain admin group as well is there any place in the group policy that i might have disabled it i've excluded admin & domain admin not to be affected by the group policy i've set but still this error occurs
    The domain group policy will overrule the local policy if you log into the domain. It shouldn't do that if you log in locally.
    "Don't be so humble - you are not that great." - Golda Meir

  13. #13
    Banned Ya_know's Avatar
    Join Date
    Jun 2001
    Posts
    10,692
    Ok, so you do have a group policy in place here, and your actual problem is not the policy, but why the admins (which you specifically excluded) are being effected by this policy...Now you got me. I don't know what you've done...and I am scared to try to figure it out. I might lose a few brain cells. Maybe you could elaborate on exactly what you have done, then tell us exactly what you desire the result to be, then what exactly is happening (which you've covered some of this, but not all). Try to eliminate the confusion…

  14. #14
    Registered User
    Join Date
    Oct 2002
    Posts
    190
    Quote Originally Posted by Ya_know
    Ok, so you do have a group policy in place here, and your actual problem is not the policy, but why the admins (which you specifically excluded) are being effected by this policy...Now you got me. I don't know what you've done...and I am scared to try to figure it out. I might lose a few brain cells. Maybe you could elaborate on exactly what you have done, then tell us exactly what you desire the result to be, then what exactly is happening (which you've covered some of this, but not all). Try to eliminate the confusion…
    Initial created a group policy to disable registry editing for my users by this policy does not include admins. The strange thing is my admin is affected by this particular registry editing policy but not the rest of the policy i've created for the users such as the"run" does not show in the start menu etc.
    I've reseted the policy back to factory default but still i cannot access the regisrty editing for the users or admin group.
    any ideas?

  15. #15
    Banned Ya_know's Avatar
    Join Date
    Jun 2001
    Posts
    10,692
    Have you any PC's that can run regedit? If so, can you open a remote PC from one that works to one that doesn't?

    I am curious what sort of access you might find there, with remote registry editing you don't get all of the root keys, but you get Local Machine...which may or may not house something that we can adjust, but this is a long shot.

    First thing is to determine remote access.

Similar Threads

  1. registry keys
    By tonks97 in forum Windows XP
    Replies: 8
    Last Post: February 21st, 2004, 02:25 PM
  2. Replies: 10
    Last Post: December 22nd, 2001, 08:58 AM
  3. [RESOLVED] ICQ Under WinXP
    By Metro in forum Windows XP
    Replies: 7
    Last Post: October 17th, 2001, 03:19 PM
  4. Replies: 4
    Last Post: September 26th, 2001, 08:39 AM
  5. registry error ---new info (Edit)
    By NJLAX8 in forum Hard Drive/IDE/SCSI Drivers
    Replies: 4
    Last Post: June 17th, 2001, 04:59 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •