registry settings don't work (All)

[dannyguindi]

Hi,

I have been trying to disable the command prompt ONLY for certain users by setting

HKEY_CURRENT_USER\Software\Policies\Microsoft\Wind ows\System\DisableCMD to 1

However, the user still has access to the command prompt. Shouldn't HKEY_CURRENT_USER take presedence over HKEY_LOCAL_MACHINE? What's going on?

Thanks

[Dirk_Diggler]

HKEY_CURRENT_USER is you, not another user.
To alter their registry settings you will have to load their hive.

I'm a newbie, take it easy on me

[dannyguindi]

Every user has a unique HKEY_CURRENT_USER key. All the keys under it apply only to the user that is logged in, and should overide the HKEY_LOCAL_MACHINE settings. My problem is that the HKEY_LOCAL_MACHINE settings are overiding HKEY_CURRENT_USER. Why?

[Dirk_Diggler]

A CURRENT_USER Key can override a MACHINE Key but if you don't load their hives you are just changing your settings not their's.

I'm a newbie, take it easy on me

[dannyguindi]

Just so you understand what I mean:

I give administrator rights to user X.
I login as user X and set the proper registry settings (disable the command prompt). Log off
I take away administrator right from user X.

Next time user X logs in, he/she shouldn't be able to use the command prompt!

It really doesn't matter if I use this process, or load the hive. Both ways should accomplish the same goal.

[kiohkohsak]

physically restrict cmd.exe with nt/2000 and assign permissions to certain users for access.
if the os is 2000 and you want to restrict it for certain users then do the following.


1. provided that u r the admin or one with admin priviledge set the user u wanted to restrict cmd, make that user part of admin group then logged on as you make a shortcut to regedit.exe and hold the shift key and right click the shortcut choose runas
type the user and thier password the you can apply the settings.

email me if it is anything.

[kastetx]

restricting is good advice. However, if i bring my own cmd.exe on a floppy it wont work. Editing registry keys is very tricky because there is a workaround in 90% of cases. Tell me what system you are running, who you are, and who you want to restrict. Email that to me, and I will detail the steps to you.