Re: MMC - admin locked out too

From: Doug Knox MS-MVP (dknox@mvps.org)
Date: 12/29/02 

From: "Doug Knox MS-MVP" <dknox@mvps.org>
Date: Sat, 28 Dec 2002 22:10:35 -0500

Eric,

These can be done via the Registry. http://www.microsoft.com/windows2000/techinfo/reskit/en-us/default.asp?url=/windows2000/techinfo/reskit/en-us/gp/gpref.asp lists the majority of the settings, and their corresponding Registry key.

At one point, a user commented that you could backup your NTUSER.DAT file, before making the changes with Group Policy Editor. Make the changes, and then put the original copy of NTUSER.DAT back in your Documents and Settings folder. I don't know that this would work. It seems logical, but......... I haven't tried it so can't vouch for it. 

-- 
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"ericB" <Cyber-Fiend@pacbell.net> wrote in message news:028e01c2aee1$d82986f0$d3f82ecf@TK2MSFTNGXA10...
> Roger, 
> You're a prince.
> 
> Now.. u wouldn't happen to know any reference material on 
> how I can accomplish what I was TRYING to accomplish:
> 
> Limit access to Regedit, MMC, command line, etc. & 
> restrict such items to Administrators only.
> 
> again, thanks.  I'm in the second week of my process of 
> reconstructing my hard drive because a "computer 
> knowledgable friend" messed up a few things & I dreaded 
> starting that process over again :D
> 
> 
> ====[ A Fellow Voyager on this JourneyQuest Called --- 
> LIFE ]=== 
> ericB aka Cyber-Fiend
> 
> 
> 
> 
> >-----Original Message-----
> >As an alternative to your predicament, locate the
> >GroupPolicies folder in Windows\System32 and
> >set a Deny of Full Control for the Administrators
> >Then, log off and back in as an admin, remove
> >the Deny, and edit local policy to remove what
> >you do not want applied to _all_ users, including
> >Administrators.
> >
> >If you are not interoperating with Windows 2000
> >systems you probably do not want to weaken the
> >XP system by enabling any of the old W2k behaviors.
> >
> >--
> >Roger
> >
> >"ericB" <Cyber-Fiend@pacbell.net> wrote in message
> >news:018d01c2aed4$88bbbd20$d6f82ecf@TK2MSFTNGXA13...
> >> I'm on my PC, a standalone PC, running WinXP, with one
> >> Administrator acct, two accts with admin privileges, 
> one
> >> acct with user privileges & the guest acct.  I was in
> >> MMC.  I created a new console for security & was in
> >> group/local policies, setting restrictions on what 
> could
> >> be done on the computer by users.  EVERYTHING I set 
> said
> >> it was supposed to affect what users could or could not
> >> do.  Such as restricting running MMC, no "Run" or 
> command
> >> line, etc.  I only wanted admins to have those
> >> privileges.  When I closed MMC, now, even I can't get 
> to
> >> cmd line, Run cmd, or open MMC.  It keeps saying talk 
> to
> >> your system administrator.   I AM the system
> >> administrator.  What happened?
> >>
> >> Did I mess up by setting those things that said 
> something
> >> about "they work in Win 2000" ?  Was I only supposed to
> >> set the one's that said WinXP?  Please help.
> >>
> >> 1.  How do I get the Run cmd to work now?
> >> 2. After doing so, how do i get MMC to recognize my 
> admin
> >> password?
> >>
> >> thanks
> >> ericB
> >
> >
> >.
> >

Relevant Pages

  • Re: MMC - admin locked out too
    ... MMC not allowed, etc. ... >> Administrator acct, two accts with admin privileges, ... >> acct with user privileges & the guest acct. ... I only wanted admins to have those ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... For the Run command, open REGEDIT and do a find for NoRun. ... > Administrator acct, two accts with admin privileges, one ... > acct with user privileges & the guest acct. ... Such as restricting running MMC, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admin to User Profile.
    ... See this KB link on copying your profile. ... > as the Administrator and that is how I log in. ... I would like to set up an acct ... Is there a process to migrate my Admin folder ...
    (microsoft.public.windowsxp.security_admin)
  • MMC - admin locked out too
    ... Administrator acct, two accts with admin privileges, one ... Such as restricting running MMC, ... how do i get MMC to recognize my admin ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... Limit access to Regedit, MMC, command line, etc. & ... >set a Deny of Full Control for the Administrators ... >> Administrator acct, two accts with admin privileges, ... >> acct with user privileges & the guest acct. ...
    (microsoft.public.windowsxp.security_admin)