I can't edit some parts of the registry

[Guest]

Hello

I have XP Pro SP2 with two accounts - one with limited and the other with
admin rights. I cannot edit anything within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer when logged
in with limited rights. I checked the permissions and they were set to Read,
so I logged in with Admin rights, changed the permissions to full control and
then rebooted. When I checked again (with limited rights), I am still only
able to read the key/values.

I wonder if there may be a setting in the Policy Editor that is preventing
access to this key. I know there are many values that can be set there and I
would like to do so. How can I gain access to change things within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer when I'm
logged in with limited rights?

Thank you (in desperation!)

 

[Guest]

why do you think you can override what is put there by design?
Why do you think it's called "limited" rights?
Why don't you just change it with Admin account?

 

[Steve N.]

Hello

I have XP Pro SP2 with two accounts - one with limited and the other with
admin rights. I cannot edit anything within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer when logged
in with limited rights. I checked the permissions and they were set to Read,
so I logged in with Admin rights, changed the permissions to full control and
then rebooted. When I checked again (with limited rights), I am still only
able to read the key/values.

I wonder if there may be a setting in the Policy Editor that is preventing
access to this key. I know there are many values that can be set there and I
would like to do so. How can I gain access to change things within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer when I'm
logged in with limited rights?

Thank you (in desperation!)

Because they're limited rights. Why are you so desperate to edit the
registry as a normal user? Login with admin rights and make the edits.

Steve

 

[Rock]

Hello

I have XP Pro SP2 with two accounts - one with limited and the other with
admin rights. I cannot edit anything within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer when logged
in with limited rights. I checked the permissions and they were set to Read,
so I logged in with Admin rights, changed the permissions to full control and
then rebooted. When I checked again (with limited rights), I am still only
able to read the key/values.

I wonder if there may be a setting in the Policy Editor that is preventing
access to this key. I know there are many values that can be set there and I
would like to do so. How can I gain access to change things within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer when I'm
logged in with limited rights?

Thank you (in desperation!)

A limited user is "limited" in what they can do. Doesn't matter what
rights you assign through the admin account. Make the changes while
logged in as admin.

 

[WTC]

Hello

I have XP Pro SP2 with two accounts - one with limited and the other with
admin rights. I cannot edit anything within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer when
logged
in with limited rights. I checked the permissions and they were set to
Read,
so I logged in with Admin rights, changed the permissions to full control
and
then rebooted. When I checked again (with limited rights), I am still
only
able to read the key/values.

I wonder if there may be a setting in the Policy Editor that is preventing
access to this key. I know there are many values that can be set there
and I
would like to do so. How can I gain access to change things within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer when I'm
logged in with limited rights?

The Administrator HKCU hive is different than HKCU hive with the account
that has limited privileges. Basically when you are logged in the Admin
account you are editing the Administrator's HKCU hive.

Try logging as the Admin then load the user hive with the limited
privileges, then change what ever you need to change in the limited user
account hive. The user's hive will be located here:

document and settings\<limited username>\ntuser.dat

 

[David H. Lipman]

From: "Dixonian69" <[email protected]>

| why do you think you can override what is put there by design?
| Why do you think it's called "limited" rights?
| Why don't you just change it with Admin account?
|

Because it is; HKEY_CURRENT_USER it will ONLY affect the currently logged on user.

The account that needs the changes in; HKEY_CURRENT_USER needs to have sufficient rights to
alter the Registry.

 

[Guest]

Thank you for the comments. I realise that if I log in with Admin rights and
edit HKCU, it does just that - for the Admin user, rather than the Limited
user.

I've noticed that I don't have permission to use gpedit.msc or secpol.msc
when logged in with Limited rights (which I understand). Can I allow this
temporarily by setting a policy when logged in with Admin rights? I think
that this would be easier than promoting then demoting the Limited account
(to have Admin rights) and an alternative to editing the Limited user hive.

 

[Steve N.]

Thank you for the comments. I realise that if I log in with Admin rights and
edit HKCU, it does just that - for the Admin user, rather than the Limited
user.

I've noticed that I don't have permission to use gpedit.msc or secpol.msc
when logged in with Limited rights (which I understand). Can I allow this
temporarily by setting a policy when logged in with Admin rights? I think
that this would be easier than promoting then demoting the Limited account
(to have Admin rights) and an alternative to editing the Limited user hive.

If you told us exactly what you are trying to accomplish we'd be better
equiped to assist you.

Steve

 

[Guest]

Sure Steve - here we go:

I want to prevent a Limited user from being able to uncheck "Hide protected
operating system files" in Windows Explorer>Tools>Folder Options>View.

I can remove the checkbox by setting the REG_DWORD "DontShowSuperHidden" to
1 in HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer.

When I'm logged in as the Limited user, I can't access
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer to add the
REG_DWORD.

I know that the protected operating system files can be shown by changing
another value in the registry but if I deny the Limited user access to the
registry, they can't edit it and I don't think that they could import a .reg
file to change the setting either (is this correct?).

I hope this makes sense. This is one example of what can be done within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer. I know
that there are several other useful settings that can be applied here, but if
it can't be edited for the Limited user, I'm stuck! By asking about
temporary access for the Limited user to have access to gpedit.msc, I assumed
that this would also allow editing of the HKCU hive whilst logged on as the
Limited user.

There you go - the situation I'm facing. Thanks again for continued
contributions.

 

[WTC]

Sure Steve - here we go:

I want to prevent a Limited user from being able to uncheck "Hide
protected
operating system files" in Windows Explorer>Tools>Folder Options>View.

I can remove the checkbox by setting the REG_DWORD "DontShowSuperHidden"
to
1 in HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer.

When I'm logged in as the Limited user, I can't access
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer to add
the
REG_DWORD.

I know that the protected operating system files can be shown by changing
another value in the registry but if I deny the Limited user access to the
registry, they can't edit it and I don't think that they could import a
.reg
file to change the setting either (is this correct?).

I hope this makes sense. This is one example of what can be done within
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer. I know
that there are several other useful settings that can be applied here, but
if
it can't be edited for the Limited user, I'm stuck! By asking about
temporary access for the Limited user to have access to gpedit.msc, I
assumed
that this would also allow editing of the HKCU hive whilst logged on as
the
Limited user.

1. Log into the registry with the Admin Account.
2. Highlight HKLM in regedit.
3. In regedit go to the File Menu and select Load Hive. Select the limited
user's hive.

documents and settings\<username>\ntuser.dat

4. Name the Hive "UserName"
5. Navigate to this location to make your changes.

HKLM\UserName\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

6. Highlight HKLM\UserName
7. Go to the File Menu and select Unload Hive.
8. Logged in the Limited Account to see if the change was made.

 

[Guest]

Thank you William for the explicit instructions, and apologies for the delay
in responding. I'll export the Limited user's HKCU and backup ntuser.dat,
just in case, as well as set a restore point and then try what you've
suggested. If the worst comes to the worst and it doesn't work, at least I
can revert to how things were before I "played" around!