Re: Restriction on running regedit.exe

From: BE (BE_at_discussions.microsoft.com)
Date: 07/14/04


Date: Wed, 14 Jul 2004 14:21:04 -0700

I have done that VB Script before. As I mentioned I searched for DisableRegistryTools in all the registry and checked the value to be '0'. Besides, I CAN run regedt32.exe which shows that registry tools have not been disabled in my system. By the way, I have the latest version of Trend Micro Office Scan running on my computer.
One more thing, I created a new administrator account and tried to run regedit.exe from there and it worked! But still can not run it from the original account.
-----------------------------------------------------

"Torgeir Bakken (MVP)" wrote:

> BE wrote:
>
> > My system is running Windows 2K professional and is connected to a LAN. When I try to run regedit.exe from an administrator account it returns this error message: "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator." whereas I can run regedt32.exe at the same time.
> > I followed most of the suggestions in other postings with the same subject but non of them worked. I also checked the value for DisableRegistryTools on the registry which was 0!
> > Any suggestions?
> >
> > Thanks.
> Hi
>
> This might be the work of the Swen worm or something similar
> (it could be from some spyware or parasite as well).
>
> To try to solve your problem, do the following:
>
> Copy and paste the URL address lines into your IE address bar:
>
> http://www.dougknox.com
>
> In the menu, select Security, Disable/Enable Registry Editing Tools.
>
> This small VB Script will remove this restriction. If the first time the
> script is run it says "Disabled", run it again to enable registry edits again.
>
>
> To try to find what has caused this:
>
> Run a cleanup tool, e.g. Stinger.exe from McAfee, it removes 30+
> virus/worms in one sweep.
>
> McAfee AVERT Stinger
> http://vil.nai.com/vil/stinger/
>
> Be sure to run an updated Antivirus program at all times.
>
>
> For the Spyware and Parasites part, you will need to run other tools:
>
> Dealing with Unwanted Spyware and Parasites
> http://www.mvps.org/winhelp2002/unwanted.htm
>
> The Parasite Fight Quick Fix Protocol
> http://aumha.org/a/quickfix.htm
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/community/scriptcenter/default.mspx
>



Relevant Pages

  • Re: registry editing question
    ... Microsoft support but I could not get into the registry to delete the ... > (it could be from some spyware or parasite as well). ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.general)
  • Re: Cannot open regedit
    ... I had some viruses and removed them. ... >(it could be from some spyware or parasite as well). ... >torgeir, Microsoft MVP Scripting and WMI, Porsgrunn ...
    (microsoft.public.win2000.registry)
  • Re: Cant Access task Manager
    ... > removed some spyware but that didnt help this problem. ... McAfee AVERT Stinger ... The Parasite Fight Quick Fix Protocol ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.general)
  • Re: Cant open regedit
    ... >(it could be from some spyware or parasite as well). ... >McAfee AVERT Stinger ... >torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.win2000.registry)
  • Re: After installing Service Pack 2, Update wants me to install SP
    ... Updates service successfully from services.msc ... something similar (it could be from some spyware or parasite as well). ... The Parasite Fight Quick Fix Protocol ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsupdate)