registry

[Andy]

Hi all
I have a problem regarding writing registry keys.

I am trying to write this key to the registry for users:

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Sys
tem]
"DisableCMD"=dword:00000001

(no cmd prompt and no running batch files)

I am writing it via kix logon script using this
translation:

WriteValue
("HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Sy
stem","DisableCMD","00000001","REG_DWORD")

this works fine locally on my xp machine, when i run
through the kix logon to windows 2000 machines i get this
in the registry:

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Sys
tem]
"DisableCMD"=dword:00000002

And this allows users to create batch files through
notepad and execute programs from the banned list, does
any one know why the key writes like it does?

Thanks
Andy

 

[Drew Cooper [MSFT]]

Is the value being overwritten by a group policy?

Have you tried using something like regmon (free download from sysinternals)
to see what's writing to the registry?