Registry editing has been disabled by your administrator!

[kennysarmy]

Windows 7 Testing continues...

 

I have a line of code in my XP login.bat that is:

 

REM Allow Picturetoexe software to run

regedit.exe /s "\\fp2\netlogon\Batch\pte.reg"

 

works fine.

 

When I add this line to the Win7 login.bat it returns the error:

"Registry editing has been disabled by your administrator!"

 

Which is good ! as I do not want the students to be able to run regedit...but how do I allow the login script to run the command?

 

I guess I have locked down my win7 test machine more thoroughly than my XP one...

 

Any ideas?

[cromertech]

Can you put this registry entry into Group Policy Preferences instead or run it as a startup script?

[kennysarmy]

OK.

 

Created a new GPO called 7-startupscript

 

Navigated to : User Configuration, Policies, Windows Settings, Scripts and Logon

 

created a batch file called "7-startup.bat" which contained the code:

@ECHO OFF

REM Allow Picturetoexe software to run

regedit.exe /s "\\fp2\netlogon\Batch\pte.reg"

 

and applied this GPO to the users container...

 

at logon again the message is:

 

"Registry editing has been disabled by your administrator!"

 

[jsnetman]

Try the same batch file in a computer startup script, not the user startup.

[3s-gtech]

Yeah, this wouldn't work on mine either, the security settings mean that it's trying to open regedit as the logged in user - blocked. You'll need to do this as a Computer Configuration setting, if possible.

[Arthur]

I think you need to use Reg.exe in your batch file instead of RegEdit.exe...

 

REG IMPORT "\\fp2\netlogon\Batch\pte.reg"

[kennysarmy]

Try the same batch file in a computer startup script, not the user startup.

 

That did nt work I'm afraid.

[kennysarmy]

Yeah, this wouldn't work on mine either, the security settings mean that it's trying to open regedit as the logged in user - blocked. You'll need to do this as a Computer Configuration setting, if possible.

 

But the registry key I am trying to edit is:

[HKEY_CURRENT_USER\Software\PTE]

&

[HKEY_CURRENT_USER\Software\WnSoft\VideoBuilder]

 

Can these be set at startup before someone logs on?

 

Still a bit stuck on this one

[kennysarmy]

I think you need to use Reg.exe in your batch file instead of RegEdit.exe...

 

REG IMPORT "\\fp2\netlogon\Batch\pte.reg"

 

Thanks - will give this a try after lunch - cheers

[kennysarmy]

Sadly this did not work either as a user script or a machine startup script.

 

 

Stuck - I have quite a few legacy programs that require registry tweaks.

 

How easy is it to write my own GPO to pass the HKEY_CURRENT_USER\Software\PTE value out to the win7 pc's?

[kennysarmy]

thought I would try a new approach:

 

Seems simple enough

 

 

Sorted - happy man....

Edited February 23, 2011 by kennysarmy

[kennysarmy]

in this video solution for this problem it worked for me

 

What does that ACTUALLY do??

[X-13]

What does that ACTUALLY do??

 

Probably installs a keylogger or other malware.

[Michael]

This is a very old discussion, but it's easy to resolve -

 

By navigating to: User Config > Admin Templates > System - Prevent access to registry editing tools, choose Enabled, but then specify 'No' from the drop down menu.

 

Scripts can then run at logon for any type of domain user, but cannot be manually run by the end user themselves.