RestrictRun problems

[jedi]

i have read what you have written in past postings on this subject but am still having problems. this is what i did..... I was trying to restrict explorer, so i opened regedit.exe and went to key


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

then created the new DWORD [RestrictRun] and set the value to 1,

now what i think i did was to just create a string value named [1] and set it as "explorer.exe" i dont think i created the key

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\RestrictRun.


i think i set the string values underneath where i set the DWORD [RestrictRun]

After discovering none of my .exe apps will run i studied the instructions more and now understand them to mean i should have put the string values in key


[HKEY_CURRENT_USER\..........\Explorer\RestrictRun],

not underneath the new DWORD [RestrictRun] that i set in key


[HKEY_CURRENT_USER\........\Explorer]


like i said i THINK this is how i did it, but i MAY have done it properly per the instructions to "Restricting Applications Users Can Run". beyond that i get what is talked about by other people when this is done , that only the app. specified will run.


i dont get why if i click the explorer icon on my desktop i get the "restriction" error, but if i open start menu and click on favorites and click a site it opens and im online????


i have tried the edits to the autoexec.bat but to no luck yet. maybe i have a syntax problem or maybe not working because i may have made edit to registry incorrectly?


on the edits to autoexec.bat i have these questions. a. is there a space between [regedit] and [/D]?? b. for the phrase [HKEY_CURRENT_USER], do you actually put in the underslash between words or does this just represent a spacebar keystroke???. c. does it matter where in the autoexec.bat file i put the 2 lines??? i have tried several different combonations but still no luck...



if i did edit the regestry incorrectly like i think i did, is the edit i want to make to the autoexec.bat file going to be different???


also, when i restart in safe mode and go into registry i dont even see my edits, just dont understand this?


thankyou for listening, and take care, look forward to hearing anything you can say on this.


<P ID="edit"><FONT class="small">Edited by jedi on 03/17/01 20:21.</FONT></P>

[POBrien]

I received your private message too.

It doesn't matter how you add the entries. We know for sure that the restrictrun value and dword data 1 was added correctly. It's the syntax in the autoexec.bat file.

to answer your ?'s...


a. is there a space between [regedit] and [/D]?? = yes. There should also be a space after /D and before "[HKEY_CURRENT_USER......]


b. for the phrase [HKEY_CURRENT_USER], do you actually put in the underslash between words or does this just represent a spacebar keystroke???. = Yes. The underscore (slash) is needed. No spacebar.

c. does it matter where in the autoexec.bat file i put the 2 lines??? No. Just make sure that neither of them wrap to the next line.

i dont get why if i click the explorer icon on my desktop i get the "restriction" error, but if i open start menu and click on favorites and click a site it opens and im online????

= I am glad that you found this out. I'm think that since you executed an .html/.htm file explorer was launched from it's internal code and not directly from iexplore.exe.

also, when i restart in safe mode and go into registry i dont even see my edits, just dont understand this?

= I have no idea. Maybe windows doesn't recognize the entries as "standard" and they aren't loaded from the .dat files.

here they are....

regedit /D "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer"
regedit /D "HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Policies\Explorer"