Cannot run gpedit.msc

[Guest]

I attempted to configure gpedit.msc to only allow specific applications to
run. I entered iexplore.exe and what I thought to be gpedit.msc in the
allowed list. However, after closing gpedit.msc, I am unable to run it
again. How can I either (i) run gpedit.msc to undo whatever blunder I have
made, or (ii) return the computer and user settings to default without
accessing gpedit.msc?

 

[Steven L Umbach]

If you have another computer on the network then logon to that computer and
use the mmc snapin for Group Policy and select the locked out computer to
manage [via browse/other computer] and you will need to be logged on as a
user that is a local administrator on the locked out computer. If that is
not possible go to the \winnt\system32\group policy\user folder and give
deny permissions to the administrators group for full control. Then try to
run regedit and find the
HKEY_CURRENT_USER\\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
key and delete any entries it it. That should allow you to then open
gpedit.msc and then immediately reverse your bad settings AFTER changing the
NTFS permissions on the \winnt\system32\group policy\user folder to give
administrators full control again. If you can not run regedit. Then find
regedit in the \winnt folder, make a copy of it to somewhere, rename it to
iexplore.exe and try to run it from that folder as ie.explore.exe. If that
works be sure to rename it to regedit.exe when done. --- Steve

 

[Guest]

Actually just copying regedit to another loc, renaming it, then running it to
undo the blunder worked.Thanks Steve.

 

[Steven L Umbach]

Cool. Glad it worked and thanks for reporting back. The problem you had with
gpedit.msc is that it needs mmc.exe to work. In the future if you want to
try that setting again use filemon from SysInternals to see what files are
accessed by an application as often more then a few are needed. --- Steve

http://www.sysinternals.com/Utilities/Filemon.html --- filemon free from
SysInternals