Access problem after registry permissions changed

[Chris B]

Hi,
I've noted some of you talking about changing security permissions for
system users.
I'm the administrator of my own machine, and I changed the permissions
settings so that access to the registry (Windows 2000) was denied to
all users except the "SYSTEM" and the "OWNER" and the "Administrator".
I did this in the hope of preventing any viruses or other unwanted
data from being deposited in my registry when connected to the
internet.

After restarting my machine, I found that "Active Desktop" does not
work because access is denied. I can't access any programs, including
regedt32.exe via the Start button because "there are no programs
associated....." and I can't associate a program via the "Folder
Options" tool because no programs can be found!

I cannot access the registry when logged on as a "user" or as the
"Administrator".

Is it possible to log on to my machine as the "Owner" (whatever the
difference maybe from "Administrator"), in order to change the
registry persmissions back to the way they were?

Any help will be much appreciated.
Yours, Chris B.

 

[Ndi]

I'm the administrator of my own machine, and I changed the permissions

settings so that access to the registry (Windows 2000) was denied to
all users except the "SYSTEM" and the "OWNER" and the "Administrator".

If by that you mean you denied "Everyone" and allowed "Administrator",
etc, you're in deep doodoo because "deny" takes precedence over "allow" so
you just locked everyone out. You need to reinstall/repair the OS (and read
about permissions .

I did this in the hope of preventing any viruses or other unwanted
data from being deposited in my registry when connected to the
internet.

This is useless, since if you have a virus that writes to the registry it
will run on your account, Administrator. It doesn't log on as "Virus". You
COULD create a "Safe" user that only has access to a few folders and no
registry and run Internet Explorer as that user, which will prevent it from
accessing anything.

regedt32.exe via the Start button because "there are no programs
associated....." and I can't associate a program via the "Folder
Options" tool because no programs can be found!

Is it possible to log on to my machine as the "Owner" (whatever the
difference maybe from "Administrator"), in order to change the
registry persmissions back to the way they were?

It will make no difference, even a new user will be useless since you
denied "Everyone".

 

[Ndi]

I'm the administrator of my own machine, and I changed the permissions

settings so that access to the registry (Windows 2000) was denied to
all users except the "SYSTEM" and the "OWNER" and the "Administrator".

If by that you mean you denied "Everyone" and allowed "Administrator",
etc, you're in deep doodoo because "deny" takes precedence over "allow" so
you just locked everyone out. You need to reinstall/repair the OS (and read
about permissions .

I did this in the hope of preventing any viruses or other unwanted
data from being deposited in my registry when connected to the
internet.

This is useless, since if you have a virus that writes to the registry it
will run on your account, Administrator. It doesn't log on as "Virus". You
COULD create a "Safe" user that only has access to a few folders and no
registry and run Internet Explorer as that user, which will prevent it from
accessing anything.

regedt32.exe via the Start button because "there are no programs
associated....." and I can't associate a program via the "Folder
Options" tool because no programs can be found!

Is it possible to log on to my machine as the "Owner" (whatever the
difference maybe from "Administrator"), in order to change the
registry persmissions back to the way they were?

It will make no difference, even a new user will be useless since you
denied "Everyone".