enable CMD on computers in a workgroup.

[denmyos]

Try setting it in HKCU

 

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
"DisableCMD"=dword:00000000

 

Put the code in notepad and save it as .reg.

 

This is not gonna work, since it only enable the user that is currently logged in,,AKA the administrator.

I need it to work on the other user (Bruger), BUT i need to launch the script when i'm logged in as the administrator, Since the User has no privileges to launch a script.

 

But thanks anyway

[clareq]

Current user means just that - whoever is currently logged on. Try it.

[denmyos]

Current user means just that - whoever is currently logged on. Try it.

 

yes i know, but the current user (auto login is "Bruger") will not have rights to run a script.

Thats why i need a script that is running under the administrator (or with administrator right, and password), BUT changes regedit for the user "Bruger".

 

 

I all ready tried your script.

When i run it when i'm logged as Administrator, it will change the regedit for the administrator.

When i run it when i'm logged in as the user "Bruger" it tells me that i dont have the correct privileges.

 

[mavhc]

Copy it to the default user registry hive, then new users will copy that. Delete everyone's profile.

[denmyos]

Copy it to the default user registry hive, then new users will copy that. Delete everyone's profile.

 

can you tell me in more detail how to do that.

Thank you

[denmyos]

I finally figured out why this is not working.

 

My setup is like this:

 

When the computer reboots, its automatically logs-in the User (bruger), which has more or less no rights what so ever.

 

I have to logoff the User Bruger to get it to work.

 

This will work locally, when i'm logged in as the administrator and use a elevated cmd.

Even though i'm logged-in as the administrator, i have to logoff the user Bruger.

@[u][url="http://www.edugeek.net/member.php?u=16971"]echo[/url][/u] 
offLogoff 1 ( Will logoff the user Bruger) 
reg LOAD HKU\TEMP "C:\Users\Default\NTUSER.DAT"
reg ADD "HKU\TEMP\Software\Policies\Microsoft\Windows\System" /t REG_DWORD /f /v "DisableCMD" /d 0

reg UNLOAD HKU\TEMP

 

reg LOAD HKU\TEMP "C:\Users\Bruger\NTUSER.DAT"
reg ADD "HKU\TEMP\Software\Policies\Microsoft\Windows\System" /t REG_DWORD /f /v "DisableCMD" /d 0

reg UNLOAD HKU\TEMP

 

But it will not work from inside deep freeze console.

I have talked to faronics support, they tell me all Batch files running within the Deep freeze console is being executed under the system account.

 

I don't understand why its not working in the DF console.

 

When i reboot the computer the user Bruger will always have the ID 1, so thats not the problem.

 

The script has to be a .bat, DF console doesn't except any else.

 

I'm up sh*t creek on this one.

Edited May 28, 2019 by denmyos

[QwertyMash]

This is where not having a proper domain is proving to be a nightmare.

Is there absolutely no way you guys can get an old computer up and running as a domain controller? Your life would be far easier. So much more flexibility with Group Policy.

[ChrisMiles]

can you tell me in more detail how to do that.

Thank you

 

Open Regedit, Select HKEY_USERS, Go File > Load Hive, Browse to "C:\Users\Default\NTUSER.DAT", enter any unique name, under this new name change the registry key you wish to change, select your unique name, File > Unload Hive.

Open System Properties > Advanced > User Profiles, delete user profile for kiosk account.

 

Any new user that logs in will now have that registry value set.