Windows 2000 How can I disable the use of regedit and regedt32?

[George Hester]

The reason I ask is because for some reason the two have been disabled in my
domain controller Administrator account in Windows 2000 SP4. Luckily I made
duplicate Administrator equivalent accounts when I first constructed this
machine so not all is lost but I would like to get back the control for the
original Administrator account. I believe something happened to a Group
Policy or Local Security or Domain security or Controller security or some
other security or NTFS securuity or ... Thanks.

--
George Hester
_________________________________

 

[John John (MVP)]

DisableRegistryTools
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/93466.mspx?mfr=true

John


George Hester wrote:

> The reason I ask is because for some reason the two have been disabled in my
> domain controller Administrator account in Windows 2000 SP4. Luckily I made
> duplicate Administrator equivalent accounts when I first constructed this
> machine so not all is lost but I would like to get back the control for the
> original Administrator account. I believe something happened to a Group
> Policy or Local Security or Domain security or Controller security or some
> other security or NTFS securuity or ... Thanks.
>
> --
> George Hester
> _________________________________
>
>

 

[George Hester]

Yeah on the surface that looks like it should be helpful. But if you look
closely at that solution, there is no name for the registry entry that is to
be used there. In fact the key (System) does not exist in Windows 2000 and
REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can do
with that. The link to the Group Policy Table is dead. And the Group Policy
Entry they say I can follow under User Configuration I have is Not
Configured. So it look's like that's a bum path, Maybe something like this
might work?

I would be willing to just delete the entire Policy key as I see it is
virtually empty but I forget how that is done in a .reg file. Do you recall
John? -[] I think?

How about a a windows script that would assign all permissions of one user
to another user? I could take all the permissions of one of my admin
accounts and assign them to my Administrator account. That should do it?

--
George Hester
_________________________________
"John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message
news:e0Eg8R6EJHA.4336@TK2MSFTNGP05.phx.gbl...
> DisableRegistryTools
>
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry
/93466.mspx?mfr=true
>
> John
>
>
> George Hester wrote:
>
> > The reason I ask is because for some reason the two have been disabled
in my
> > domain controller Administrator account in Windows 2000 SP4. Luckily I
made
> > duplicate Administrator equivalent accounts when I first constructed
this
> > machine so not all is lost but I would like to get back the control for
the
> > original Administrator account. I believe something happened to a Group
> > Policy or Local Security or Domain security or Controller security or
some
> > other security or NTFS securuity or ... Thanks.
> >
> > --
> > George Hester
> > _________________________________
> >
> >

 

[Dave Patrick]

The value name is 'DisableRegistryTools' add it with value 0 This should
work. I think the 'Meaning' column descriptions on that page are reversed.
Do you get the message indicating policy restriction?



--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


"George Hester" wrote:
> Yeah on the surface that looks like it should be helpful. But if you look
> closely at that solution, there is no name for the registry entry that is
> to
> be used there. In fact the key (System) does not exist in Windows 2000 and
> REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can
> do
> with that. The link to the Group Policy Table is dead. And the Group
> Policy
> Entry they say I can follow under User Configuration I have is Not
> Configured. So it look's like that's a bum path, Maybe something like this
> might work?
>
> I would be willing to just delete the entire Policy key as I see it is
> virtually empty but I forget how that is done in a .reg file. Do you
> recall
> John? -[] I think?
>
> How about a a windows script that would assign all permissions of one user
> to another user? I could take all the permissions of one of my admin
> accounts and assign them to my Administrator account. That should do it?
>
> --
> George Hester

 

[George Hester]

Hey I got it. I used this page:

http://windowsxp.mvps.org/tweakuirest.htm

I just put #1 in the Run key and that was it. I looked at that key under my
other admin accounts and there was nothing in there so I just assumed it was
that way in the Administrator account also. Turns out there was a bogus
codec called sys_vd4.dat in C:\Program Files\Common Files\System which I got
from using Firefox 2.0.0.14 the other day. I remember it because I couldn't
stop the d/l w/o crashing the application which is what I should have done.

--
George Hester
_________________________________
"Dave Patrick" <DSPatrick@nospam.gmail.com> wrote in message
news:u029uV7EJHA.4104@TK2MSFTNGP04.phx.gbl...
> The value name is 'DisableRegistryTools' add it with value 0 This should
> work. I think the 'Meaning' column descriptions on that page are reversed.
> Do you get the message indicating policy restriction?

Yes Dave that's what I got and Microsoft REALLY should have put
"DisableRegistryTools" in that article!!!

>
>
>
> --
>
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
>
> "George Hester" wrote:
> > Yeah on the surface that looks like it should be helpful. But if you
look
> > closely at that solution, there is no name for the registry entry that
is
> > to
> > be used there. In fact the key (System) does not exist in Windows 2000
and
> > REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can
> > do
> > with that. The link to the Group Policy Table is dead. And the Group
> > Policy
> > Entry they say I can follow under User Configuration I have is Not
> > Configured. So it look's like that's a bum path, Maybe something like
this
> > might work?
> >
> > I would be willing to just delete the entire Policy key as I see it is
> > virtually empty but I forget how that is done in a .reg file. Do you
> > recall
> > John? -[] I think?
> >
> > How about a a windows script that would assign all permissions of one
user
> > to another user? I could take all the permissions of one of my admin
> > accounts and assign them to my Administrator account. That should do it?
> >
> > --
> > George Hester
>

 

[John John (MVP)]

It's the same thing as what was on the Microsoft page, done with a
command instead of manually.

John

George Hester wrote:

> Hey I got it. I used this page:
>
> http://windowsxp.mvps.org/tweakuirest.htm
>
> I just put #1 in the Run key and that was it. I looked at that key under my
> other admin accounts and there was nothing in there so I just assumed it was
> that way in the Administrator account also. Turns out there was a bogus
> codec called sys_vd4.dat in C:\Program Files\Common Files\System which I got
> from using Firefox 2.0.0.14 the other day. I remember it because I couldn't
> stop the d/l w/o crashing the application which is what I should have done.
>
> --
> George Hester
> _________________________________
> "Dave Patrick" <DSPatrick@nospam.gmail.com> wrote in message
> news:u029uV7EJHA.4104@TK2MSFTNGP04.phx.gbl...
>
>>The value name is 'DisableRegistryTools' add it with value 0 This should
>>work. I think the 'Meaning' column descriptions on that page are reversed.
>>Do you get the message indicating policy restriction?
>
>
> Yes Dave that's what I got and Microsoft REALLY should have put
> "DisableRegistryTools" in that article!!!
>
>
>>
>>
>>--
>>
>>Regards,
>>
>>Dave Patrick ....Please no email replies - reply in newsgroup.
>>Microsoft Certified Professional
>>Microsoft MVP [Windows]
>>http://www.microsoft.com/protect
>>
>>
>>"George Hester" wrote:
>>
>>>Yeah on the surface that looks like it should be helpful. But if you
>
> look
>
>>>closely at that solution, there is no name for the registry entry that
>
> is
>
>>>to
>>>be used there. In fact the key (System) does not exist in Windows 2000
>
> and
>
>>>REG_DWORD is a DataType not a REG_NAME. So there is really nothing I can
>>>do
>>>with that. The link to the Group Policy Table is dead. And the Group
>>>Policy
>>>Entry they say I can follow under User Configuration I have is Not
>>>Configured. So it look's like that's a bum path, Maybe something like
>
> this
>
>>>might work?
>>>
>>>I would be willing to just delete the entire Policy key as I see it is
>>>virtually empty but I forget how that is done in a .reg file. Do you
>>>recall
>>>John? -[] I think?
>>>
>>>How about a a windows script that would assign all permissions of one
>
> user
>
>>>to another user? I could take all the permissions of one of my admin
>>>accounts and assign them to my Administrator account. That should do it?
>>>
>>>--
>>>George Hester
>>
>
>