How can I disable the use of regedit and regedt32?

[George Hester]

The reason I ask is because for some reason the two have been disabled in my
domain controller Administrator account in Windows 2000 SP4. Luckily I made
duplicate Administrator equivalent accounts when I first constructed this
machine so not all is lost but I would like to get back the control for the
original Administrator account. I believe something happened to a Group
Policy or Local Security or Domain security or Controller security or some
other security or NTFS securuity or ... Thanks.

 

[John John (MVP)]

DisableRegistryTools
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/93466.mspx?mfr=true

John

 

[George Hester]

Yeah on the surface that looks like it should be helpful. But if you look
closely at that solution, there is no name for the registry entry that is to
be used there. In fact the key (System) does not exist in Windows 2000 and
REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can do
with that. The link to the Group Policy Table is dead. And the Group Policy
Entry they say I can follow under User Configuration I have is Not
Configured. So it look's like that's a bum path, Maybe something like this
might work?

I would be willing to just delete the entire Policy key as I see it is
virtually empty but I forget how that is done in a .reg file. Do you recall
John? -[] I think?

How about a a windows script that would assign all permissions of one user
to another user? I could take all the permissions of one of my admin
accounts and assign them to my Administrator account. That should do it?

 

[Dave Patrick]

The value name is 'DisableRegistryTools' add it with value 0 This should
work. I think the 'Meaning' column descriptions on that page are reversed.
Do you get the message indicating policy restriction?



--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

 

[George Hester]

Hey I got it. I used this page:

http://windowsxp.mvps.org/tweakuirest.htm

I just put #1 in the Run key and that was it. I looked at that key under my
other admin accounts and there was nothing in there so I just assumed it was
that way in the Administrator account also. Turns out there was a bogus
codec called sys_vd4.dat in C:\Program Files\Common Files\System which I got
from using Firefox 2.0.0.14 the other day. I remember it because I couldn't
stop the d/l w/o crashing the application which is what I should have done.

--
George Hester
_________________________________

The value name is 'DisableRegistryTools' add it with value 0 This should
work. I think the 'Meaning' column descriptions on that page are reversed.
Do you get the message indicating policy restriction?

Yes Dave that's what I got and Microsoft REALLY should have put
"DisableRegistryTools" in that article!!!

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

Yeah on the surface that looks like it should be helpful. But if you look
closely at that solution, there is no name for the registry entry that is
to
be used there. In fact the key (System) does not exist in Windows 2000 and
REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can
do
with that. The link to the Group Policy Table is dead. And the Group
Policy
Entry they say I can follow under User Configuration I have is Not
Configured. So it look's like that's a bum path, Maybe something like this
might work?

I would be willing to just delete the entire Policy key as I see it is
virtually empty but I forget how that is done in a .reg file. Do you
recall
John? -[] I think?

How about a a windows script that would assign all permissions of one user
to another user? I could take all the permissions of one of my admin
accounts and assign them to my Administrator account. That should do it?

 

[John John (MVP)]

It's the same thing as what was on the Microsoft page, done with a
command instead of manually.

John

Hey I got it. I used this page:

http://windowsxp.mvps.org/tweakuirest.htm

I just put #1 in the Run key and that was it. I looked at that key under my
other admin accounts and there was nothing in there so I just assumed it was
that way in the Administrator account also. Turns out there was a bogus
codec called sys_vd4.dat in C:\Program Files\Common Files\System which I got
from using Firefox 2.0.0.14 the other day. I remember it because I couldn't
stop the d/l w/o crashing the application which is what I should have done.

--
George Hester
_________________________________

The value name is 'DisableRegistryTools' add it with value 0 This should
work. I think the 'Meaning' column descriptions on that page are reversed.
Do you get the message indicating policy restriction?

Yes Dave that's what I got and Microsoft REALLY should have put
"DisableRegistryTools" in that article!!!

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

Yeah on the surface that looks like it should be helpful. But if you

look

closely at that solution, there is no name for the registry entry that

is

to
be used there. In fact the key (System) does not exist in Windows 2000

and

REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can
do
with that. The link to the Group Policy Table is dead. And the Group
Policy
Entry they say I can follow under User Configuration I have is Not
Configured. So it look's like that's a bum path, Maybe something like

this

might work?

I would be willing to just delete the entire Policy key as I see it is
virtually empty but I forget how that is done in a .reg file. Do you
recall
John? -[] I think?

How about a a windows script that would assign all permissions of one

user

to another user? I could take all the permissions of one of my admin
accounts and assign them to my Administrator account. That should do it?