kennysarmy Posted February 18, 2011 Posted February 18, 2011 Windows 7 Testing continues... I have a line of code in my XP login.bat that is: REM Allow Picturetoexe software to run regedit.exe /s "\\fp2\netlogon\Batch\pte.reg" works fine. When I add this line to the Win7 login.bat it returns the error: "Registry editing has been disabled by your administrator!" Which is good ! as I do not want the students to be able to run regedit...but how do I allow the login script to run the command? I guess I have locked down my win7 test machine more thoroughly than my XP one... Any ideas?
cromertech Posted February 18, 2011 Posted February 18, 2011 Can you put this registry entry into Group Policy Preferences instead or run it as a startup script?
kennysarmy Posted February 18, 2011 Author Posted February 18, 2011 OK. Created a new GPO called 7-startupscript Navigated to : User Configuration, Policies, Windows Settings, Scripts and Logon created a batch file called "7-startup.bat" which contained the code: @ECHO OFF REM Allow Picturetoexe software to run regedit.exe /s "\\fp2\netlogon\Batch\pte.reg" and applied this GPO to the users container... at logon again the message is: "Registry editing has been disabled by your administrator!"
jsnetman Posted February 18, 2011 Posted February 18, 2011 Try the same batch file in a computer startup script, not the user startup.
3s-gtech Posted February 18, 2011 Posted February 18, 2011 Yeah, this wouldn't work on mine either, the security settings mean that it's trying to open regedit as the logged in user - blocked. You'll need to do this as a Computer Configuration setting, if possible.
Arthur Posted February 18, 2011 Posted February 18, 2011 I think you need to use Reg.exe in your batch file instead of RegEdit.exe... REG IMPORT "\\fp2\netlogon\Batch\pte.reg"
kennysarmy Posted February 23, 2011 Author Posted February 23, 2011 Try the same batch file in a computer startup script, not the user startup. That did nt work I'm afraid.
kennysarmy Posted February 23, 2011 Author Posted February 23, 2011 Yeah, this wouldn't work on mine either, the security settings mean that it's trying to open regedit as the logged in user - blocked. You'll need to do this as a Computer Configuration setting, if possible. But the registry key I am trying to edit is: [HKEY_CURRENT_USER\Software\PTE] & [HKEY_CURRENT_USER\Software\WnSoft\VideoBuilder] Can these be set at startup before someone logs on? Still a bit stuck on this one
kennysarmy Posted February 23, 2011 Author Posted February 23, 2011 I think you need to use Reg.exe in your batch file instead of RegEdit.exe... REG IMPORT "\\fp2\netlogon\Batch\pte.reg" Thanks - will give this a try after lunch - cheers
kennysarmy Posted February 23, 2011 Author Posted February 23, 2011 Sadly this did not work either as a user script or a machine startup script. Stuck - I have quite a few legacy programs that require registry tweaks. How easy is it to write my own GPO to pass the HKEY_CURRENT_USER\Software\PTE value out to the win7 pc's?
kennysarmy Posted February 23, 2011 Author Posted February 23, 2011 (edited) thought I would try a new approach: Seems simple enough Sorted - happy man.... Edited February 23, 2011 by kennysarmy
kennysarmy Posted July 13, 2015 Author Posted July 13, 2015 in this video solution for this problem it worked for me What does that ACTUALLY do??
X-13 Posted July 13, 2015 Posted July 13, 2015 What does that ACTUALLY do?? Probably installs a keylogger or other malware.
Michael Posted July 13, 2015 Posted July 13, 2015 This is a very old discussion, but it's easy to resolve - By navigating to: User Config > Admin Templates > System - Prevent access to registry editing tools, choose Enabled, but then specify 'No' from the drop down menu. Scripts can then run at logon for any type of domain user, but cannot be manually run by the end user themselves.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now