"Registry editing has been disabled by administrator" keeps popping up

  • Thread starter Thread starter Roger
  • Start date Start date
R

Roger

Hi all
I´m working in a network with app. 400 clients and have had an Group
Policy applyed for some time, meaning that users are not allowed to
run regedit tools.

But all of a sudden, it appears that nearly 10 of the clients get the
message:
"Registry editing has been disabled by administrator" . It has never
shown before, and i wonder why it keeps popping up now.
I don´t want this message to appear at the users computers.
I´ve tried to delete the userprofiles, but it keeps popping up at
logon.
Nothing in the event wiever!

I have temporarily disabled the policy for now to get time to solve
the problem.

Any suggestions?
 
You need to examine the startup vectors to see what's trying to modify the Registry. This behavior is indicative of a virus or other malware infection.

See www.dougknox.com, Win XP Utilities, Startup Programs Tracker. This utility gives a more readable listing than MSCONFIG.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top