made it too secure?

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I run a network at a school. We are upgrading from Windows 98 and 2000 to
XP. On 2000, it was my practice to use MMC policy control to turn of
registry editing and MMC Author Mode access (along with a lot of other
stuff). When I needed to get back in to MMC, I had a registry import that
would turn MMC Author Mode access back on.

I did not realize that with XP, when I turned off registry editing, registry
import was also turned off. This is good security, but now I can't get back
in to those computers, even though I still have the Administrator password,
of course. I believe there is a procedure to restore default policies (at
least there was one on Windows 2000), but is that the only alternative short
of a reinstall of XP?

Something quick and easy would be best but any help would be appreciated.

Thanks
Gregg Shepherd

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Gregg Shepherd wrote:

> I run a network at a school. We are upgrading from Windows 98 and 2000 to
> XP. On 2000, it was my practice to use MMC policy control to turn of
> registry editing and MMC Author Mode access (along with a lot of other
> stuff). When I needed to get back in to MMC, I had a registry import that
> would turn MMC Author Mode access back on.
>
> I did not realize that with XP, when I turned off registry editing, registry
> import was also turned off. This is good security, but now I can't get back
> in to those computers, even though I still have the Administrator password,
> of course. I believe there is a procedure to restore default policies (at
> least there was one on Windows 2000), but is that the only alternative short
> of a reinstall of XP?
>
> Something quick and easy would be best but any help would be appreciated.
Hi

Try this to enable your registry import again:

In the menu at http://www.dougknox.com, select Security,
Disable/Enable Registry Editing Tools.

This small VB Script will remove this restriction. If the
first time the script is run it says "Disabled", run it
again to enable registry edits again.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx