editing reg. of guest while logged under admin account (W2K)

[Domon]

here i go. i very long story lol.

i created a temp admin account so i can edit the registery for that account.(regediting was for IE, adn locking some stuff in it) and when i was finished i went under control panel and changed that temp admin account into a guest account and it prompt me to relogin and i did but when i did everything was reset to new. no reg edited stuff was all gone.

the bottom line is: can i edit the reg of the guest account while im logged in as admin...

THIS IS FOR WINDOWS 2000 not XP

[POBrien]

no you can't. Login to the admin account and add the guest acct to the admin group. login to the guest account and make your reg changes. Logout and back in to the admin account and then remove the guest account from the admin group.

POBrien

"Knowledge is important and Power is not. Fixing the Problem is what counts"

[Domon]

how do i add the guest to admin account? and then change it back?

PLEASE help me im a noob... i almost started crying before when i lost the reg edits i did.

<P ID="edit"><FONT class="small">Edited by Domon on 03/07/03 00:58.</FONT></P>

[POBrien]

go to the start button/run paste in compmgmt.msc and hit enter. expand the local users and groups folder/groups folder. Open the administrators group and add in the guest account. reverse the process when you're done. I know what you mean about losing settings. It can get frustrating.

POBrien

"Knowledge is important and Power is not. Fixing the Problem is what counts"

[Domon]

i did what u said and it worked BUT. listen to this.
1. after i removed admin status from guest i logout and log back in as guest acct. BUT when i logout and then right away log back in as guest everything goes back to reset settings, welcome windows screen comes up, i even deleted explorer shortcut from desktop before and now it back. and registry is also reset. i even exported reg. to desktop and its gone now....

is there system restore in 2000 or something, what can be causeing this...

what is going on.

should i make the profile local or roaming?
and how would i do that?

lol i sux so much at this.

i just noticed i wierd thing. after i removed guest acct from admin folder and relogged in i went in reg and i could still edit it....? and then when i relogged in again it goes back to default and i cant edit reg and what i did edit didnt save over.....? <P ID="edit"><FONT class="small">Edited by Domon on 03/07/03 04:49.</FONT></P>

[POBrien]

hmmm.... that's unusual behavior. without actually being at your location to work with this anomoly, I wouldn't be able to assist any further.

good luck

POBrien

"Knowledge is important and Power is not. Fixing the Problem is what counts"

[Domon]

is there a way to do the whole reg. and when im done make a file and save the file to a disk and then apply it staright to the guest acct.

also i have norton 2003 installed in the windows 2000 could that be screwing up the admin-guest switching im trying to do.

1 of my friends wrote this:
While running regedit with admin credentials, edit HKEY_USERS\ACCOUNTSID\Software\Policies\Microsoft\ Internet Explorer\Restrictions of the account that you want IE locked down. If you have mutliple accounts (profiles) and are unsure which SID is the account want to edit, the Windows 2000 resource kit includes the getsid.exe tool that will display the SID of a specified account.

DOES THAT MAKE SENSE.
<P ID="edit"><FONT class="small">Edited by Domon on 03/07/03 12:11.</FONT></P>

[POBrien]

LOL DOM. NO IT DOESN'T. TAKE CARE KIDDO :)

POBrien

"Knowledge is important and Power is not. Fixing the Problem is what counts"

[Andy-S]

I think this is what your friend wants you to try:

Download getsid from Microsoft - <a target="_blank" href=http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/getsid-o.asp>Click Here</a>


Extract the files and run getsid from a command prompt:

The syntax is:

getsid \\server account1 \\server account2

Where:
server = computer name thatyou are logged into
account1 = login name for account you want to put restrictions on
account2 = login name for other account (I used administrator)

The output will be that the SID's don't match and it will display the SID's for both the user and admin (if you use admin).

You can then go to the registry when logged in as administrator and make the required changes.

I don't know if it will work so back up the keys before changing them.



Cheers
Andy

[hitman47]

I don't fully understand how you are logging into the machine, but an easy way to edit any users reg file is to load it into regedt32. Start regedt32, select load hive from file menu, browse to the users reg file (user.dat 9x, ntuser.dat nt/2k/xp), give it a name so you can identify it in the tree, and away you go.

This was a handy trick I learnt after losing some certificate information stored in a users profile which had had its domain changed.

Nick

[jasonx]

There is a way to run regedit under the guest account.

Execute this line either in Start-&gt;Run or cmd.exe:
"runas /noprofile /user:&lt;computername&gt;\administrator regedit"

(replace &lt;computername&gt; with the name of your computer.)

Then type in your administrator password at the prompt and regedit will load. Then edit it as needed.