View Full Version : RestrictRun
beginner
10-01-2001, 09:37 AM
Hi, I just wanted to try the RestrictRun, but now i got a big big problem, i can't open most of the .exe files.especially regedit ... and many others means my windows2000pro is very sick :0) ..meanwhile i can logon to the same PC by an Administrator password ... what i want to know is ..: is a manner to cure all this logging as an administrator??? ... or noway and i have to reinstall my system
thanx to all
RWSchlatter
10-01-2001, 10:37 PM
Always be careful and read the documentation that comes with policy settings. And you should be especially careful when setting policies when using the Administrator account on WinNT/2K and making settings - you may even lock yourself out as an Admin !
"RestrictedRun" needs a list of programs that are allowed to be executed, and that means you would need to include Regedit.exe in that list too.
Check following tweak and set the value to 0 (zero) to disable the registry tools (may be insufficient but a first try). Use the unlock.reg file mentioned.
<a target="_blank" href=http://www.winguides.com/registry/display.php/190/>http://www.winguides.com/registry/display.php/190/</a>
There may be a way aroung the blocked regedit.exe by running a wsh script, but J would first have to look for that piece of code. And script execution may also be blocked off by the current setting.
______________
Regards - Richard<P ID="edit"><FONT class="small">Edited by RWSchlatter on 10/01/01 17:40.</FONT></P>
beginner
10-02-2001, 05:33 PM
thanx for your answer but i've tried unlock.reg and it didn't work ... do u think if i re-install windows2000pro without deleting, will it work ??
RWSchlatter
10-02-2001, 06:15 PM
yes of course, cause you get a fresh registry, you loose all application options and all user definitions.
Better first try a Repair when booting from the cd.
______________
Regards - Richard
beginner
10-02-2001, 07:00 PM
thanx,
I've tried already to repair but nothing happened ... could you please tell me what do you think about that ??
-once i could logon as an Administrator and can't do anything about the user (using the same PC) who lost everything (RestrictRun) ... i know that it's possible to bringback the files used by that user ..so what do you think if i bring back all the needed files, after that i delete the user (user A for instance) then Add it again as a user using the same name (user A) ........I think it's better than reinstalling all win2000pro using the same username (user A) without deleting files
this question is just to know ?
- if i reinstall win2000pro using the same (user A)without deleting files, will it be possible to bring back all the saved files in my documents and in my favorites folders and especially would it be possible to reach my Regedit again
thanx for all
lawnguyen
10-02-2001, 08:36 PM
If you can use DosPrompt, please do this.
you can use AT command to open regedit without
any restriction. Try this
AT 10:00 /interactive regedit.exe.
I just give you example for the time but you can
enter the time at your convenient. For example
you want to open regedit at 2:00. You can use this
command:
AT 2:00 /interactive regedit.exe and enter. After
the regedit open go in there and delete the restriction that you set earlier.
If the DosPrompt didn't work so you can use task
Scheduler to Schedule for the regedit to open. Good
luck. You don't have to install nothing. Let me know
if you still have problem. I will show you another way.
beginner
10-02-2001, 09:22 PM
hi. i'm sorry i couldn't open neither the command prompt nor the task Scheduler ... but excuse what do you think all about my last suggestions ...will it work
thanx
beginner
10-03-2001, 01:41 PM
Could anyone answer this please ??
if i reinstall win2000pro using the same (user A)without deleting files, will it be possible to bring back all the saved files in my documents and in my favorites folders and especially would it be possible to reach my Regedit again ?
thanx
RWSchlatter
10-03-2001, 06:47 PM
Re-installing will set up your machine fresh. But use a different name for the system directory, cause you later can delete the "old" directory and get back the disk space.
After reinstall of Windows, you will also have to reinstall all applications, as the previous settings in the registry are lost. Don't delete the previous files, reinstall into the same locations, cause the target files already exist, they don't have to be copied anymore.
All user settings are lost of course, but not the user data. When defining a user with a previously known nam, that user will not inherit his / her settings. Every user is known internally by a "SID" which is generated fresh (apart from certain system defined usernames with "well known" SIDs). But as an administrator you always can get back ownership of directories and files thru functionality of the Security tab in the Properties sheet of these entities. As an administrator you can give back the authority to aquire ownership of these entities to the new user account.
As far as user data is concerned, you can find that in the "Documents and Settings" directory of your sytem disk if you are using standard setup. If you want to be sure not to loose anything by accident, after installing Windows, and before defining further users, move any directories except "All Users" and "Default User" and "Administrator", which are the new ones, out into a backup directory of your own. After defining users, old settings (especial My Documents and My Favourites) can be copied back. take care when accessing the file structure for Outlook Express, only take the data files below the GID (a value in braces {...}).
Regedit is a publicly available application and not a private copy ("my regedit"). By reinstalling Windows you will have a fresh registry without the policy settings you accidentially have set up and that prevent you from using this and other applications.
______________
Regards - Richard
lawnguyen
10-03-2001, 07:35 PM
Hi.
I tried that before I show it to you. Try to open
control panel and open task scheduler from there.
After open task scheduler do double click on the
add icon and browse to the regedit icon under C:\winnt\regedit and after that set the time that you
want the task scheduler to open.Try it one more
time and it will work.
POBrien
10-04-2001, 01:14 AM
<P ID="edit"><FONT class="small">Edited by POBrien on 10/03/01 21:46.</FONT></P>
beginner
10-04-2001, 09:29 AM
Hi lawnguyen, u know ?? you're a genius, i've done, i'm so happy ... thank you very very much ... once the new task added, i've right clicked on it and i run it immediatly ...
thanx again