RE: Gpedit.msc - password length greyed out


You need to find whichever <script> or program you used and access the Admin
shield to gain access to it and make your changes.
Look for these Files does they exist try to access them:
Conf.adm
Inetres.adm
Inetset.adm
Shell.adm
Subs.adm

Also does these Files exist in the System32;
gpedit.dll and fde.dll
C:\Windows\System32

Look for the Policy files created and saved on your system and access it
they will look like these:
Standard.pol
Config.pol

Locate the Admin account and try to open it:
C:\Admin\Apptools\Poledit

Try in safe Mode and locate these keys and change the value to allow you
under policies:
[-]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer=
"RestrictRun"=dword:00000000 to 0000001 to enable.
[-]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System =

"DisableRegistryTools"=dword:00000000 to 000000001 to enable

or these Keys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer =

HOW TO: Secure Windows in a Non-Domain Environment
http://support.microsoft.com/kb/269799
http://www.microsoft.com/downloads/details.aspx?familyid=7256D456-E3DA-42EA-857D-92B716077A84&displaylang=en

HTH.
Let us know.
nass
====
www.nasstec.co.uk

"dkblee" wrote:


Hi! I'm logging in using an administrator account. I don't think it's
infected. I think there are some changes that was made using poledit or some
sricpts that disabled it when we perform OS hardening. It's actualy a master
image.

Any idea??


"nass" wrote:



"dkblee" wrote:

Hi! I would like to reduce my password length to fewer digit using
gpedit.msc, but i noticed that the password length option is greyed out (all
the option in the password policy). I think i made some changes previously. I
can't remember what i did. The "regedit" command is also blocked.

Is there anyway that i can enable it back again? Thanks.

Then your admin account corrupted or your machine is infected, try to log
with another account and see if that will work?.
HTH.
nass
.

Relevant Pages

  • Re: writing to registry in vista from guest account
    ... Once again, I bring you back to *Virtualization* on Vista, because based on each user, they will have their own VirtualStore in the registry or in case of something happening with the file-system such as a folder. ... By making your application to work with Standard user rights, no UAC escalation or prompt is required for the solution to execute. ... You also don't need a manifest for the application, if it's made to run with Standard user rights and not Admin user rights. ... Like I said, even with UAC disabled, your user admin account is not an account that has full admin rights on Vista. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Error message trying to download
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... I can not apply any updates on any machine in the domain. ... I also tried to log on as the local admin account - still ... I then logged on locally with a local admin account. ...
    (microsoft.public.windowsmedia)
  • Re: How can I change the admin password of all our XP PCs on the doma
    ... You don't go to each workstation and check if that user changed the local admin password. ... If the box has a problem that means you can't use a domain admin account to logon, it is usually quicker to rebuild than troubleshoot. ... If you want to control the Local Administrators on the workstations, just disable the Local Administrator, and then use another GPO or Script that adds a existing security group in your AD as member of the local Administrators on the workstations. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Editor
    ... don't want to let guests run in an admin account. ... If you mean *some* programs - group policy isn't where you do stuff ... Oh - and don't forget to complain to the product developers about ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Access Denied - Msconfig Startup Changes
    ... Follow these steps EXACTLY and you should have admin. ... edit and try to use the msconfig again and the error should not pop up. ... "nass" wrote: ... You could be having a corrupt profile and you need to create a new Profile ...
    (microsoft.public.windowsxp.security_admin)