Comment on How to Enable the Registry Editor When Disabled by Administrator by Bennie Gatra
Comment on How to Enable the Registry Editor When Disabled by Administrator by Bennie Gatra Software Dec 23, 2008 My Digital Life Editorial Team 68 Comments How to Enable the Registry Editor When Disabled by Administrator Registry Editor, a main registry editing tool equipped in all versions and editions of Windows operating system, can be disabled, blocked and locked to prevent the RegEdit from been ran or executed by users in order to protect important system registry. Other possibility of Registry Editor been disabled is caused by virus or worm such as W32/Brontok-C. When Registry Editor is disabled, user unable and cannot open or run Registry Editor anymore. Any attempt to run RegEdit.exe will return the error “Registry editing has been disabled by your administrator”. Hence it’s impossible to remove the restriction on Registry Editor usage by using the Registry Editor itself. However, it’s possible to use various workaround to directly edit the registry to remove the policy that blocks Registry Editor usage. Enable Registry Editor using Local Group Policy Editor For user using Windows XP Professional, Windows Vista Ultimate, Windows Server 2003 or 2008 with Local Group Policy Editor and has access to an administrative user account, user can change the registry editor options in the Local Group Policy Editor. Click on Start -> Run (or Start Search in Windows Vista). Enter GPEdit.msc and then press Enter. Navigate to the following location: User Configuration -> Administrative Templates -> System In the Settings pane, locate the Prevent access to registry editing tools option, and then double-click on it to open the settings dialog. Select Disabled or Not Configured. Click on OK button. Try to run RegEdit.exe, and if required (still blocking yet), restart the computer. VBS Script to Enable or Disable Registry Editor Doug Knox has created a .vbs VB script that able to toggle between enable or disable the Registry Editor. Right click to download and save the regtools.vbs into a folder. Then double click on the VBS file to run it. The regtools.vbs VB script file will check for the appropriate value related to disabling/enabling of Registry Editor. If the registry key is not found, the key will be created to disable Registry Editor. If the value was found, it will be toggled to its opposite state and you will be informed that you need to log off and log back on or restart your computer. All change by the script is made in HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System. UnHookExec.inf by Symantec to Reset Registry Values to Default Settings In many cases, disabling of Registry Editor is caused by virus, worm or Trojan, which attempts to stop user from fixing any changes to the registry, which normally affects changes to one or more of the shell\open\command keys. For example, exefile\shell\open\command key is changed, the virus, worm or Trojan threat will run each time that system run any .exe file. As such, Symantec create a .inf script tool to reset these registry values to their default settings. WARNING: The UnHookExec.inf will reset registry keys and values related to BAT, COM, EXE, PIF, REG and SCR extensions, beside re-enabling the Registry Editor. Hence, users who just want to re-enable the Registry Editor has to manually modify the .inf file to remove the unnecessary commands. Download the file UnHookExec.inf and save it to your Windows desktop. Right-click the UnHookExec.inf file and click install. Action will be taken immediately. No display, nor any notice or boxes will appear before or after running. Try to run RegEdit.exe again, restart and reboot PC if it’s still blocked. Related posts: Windows Vista and Server 2008 Services Optimization (with Batch Command Script Optimizer) Add Page Number (with First and Last Page) Navigation Link for Blogger (Blogspot) with Gadget Element and Manual Hack Crack RapidShare Time Delay and Download Limit Optimize Vista by Disabling Unused, Unneeded or Unnecessary Windows Services Related posts: Windows Vista and Server 2008 Services Optimization (with Batch Command Script Optimizer) Add Page Number (with First and Last Page) Navigation Link for Blogger (Blogspot) with Gadget Element and Manual Hack Crack RapidShare Time Delay and Download Limit Optimize Vista by Disabling Unused, Unneeded or Unnecessary Windows Services Bennie Gatra Thanks ^_^ Ziyad Salim Thank you very much Bro mine was the problem with that antivirus unhook.inf worked for me Deepak Thanks, for the solution i am able to open regedit finally. Thanks……… GILL lololololol Im a Jew sagar even after doing it and restarting my pc it shows it is disabled plz help… Nigga THANK U SO MUCH DUUUUUUUDE ! dili thank you so much! ralph galindo pretty cool! thanks its working.. a big help to me.. Sudharani hi i followed ur instruction. After typing GPEdit.msc its showing me dialogue box stating that snap is not created and it may not be installed..Plz help to enable the task manager..? Curtis myne doesent work theres no such thing as GPEdit.msc in windows 7 plz help i need it enabled its urgent plz email me asap heres my email: Curtis5757@hotmail.co.uk Thanks if you culd help http://www.jauhari.net Jauhari Why didn’t work on me Tony Thompson My system dose not show, Once i go to Administer. Please Help ME!! ayush thank you my pc is now ok http://www.ledgerleads.com earl libby Thanks for the instructions. My Pc is ok now. VIKASH Great Tanks A lot Danial TANX UMAIR Dear Sir, i use the following: Run-> config.msc -> User Configuration -> Administrative Templates -> System # In the Settings pane, locate the Prevent access to registry editing tools option, and then double-click on it to open the settings dialog. then i check regedit.exe from Run. it does not work, i restart my computer but still have a same diologe msg. “Registry disable from administrative” i use Malwarebytes’ Anti-Malware. it inform the malware namely “pum/hijack.taskmanager” and “pum/hijack.regedit” i re install windows but its still continue.. please help me…. omwoyo john onwong&# Thanks a lot. it has relly helped me. Gimo Thanx this is working perfectly! Praveen Kumar Thanks dude this helped me a lot bennyp none of the above methods helped. it’s a vista home premium box, so no gpe. unhookexec.inf says “the server returned a reference” whatever that means, and even running command prompt as administrator and attempting to change the key from command line returns “editing the registry has been disabled by administrator” Sumit Gouria This is a good site and solve any problem .Thank you mydigitallife.info Dave Roberts I’m running Win 7 and I’ve tried every method on this page, and more than 20 results on Google, and none of them worked. I tried the “Support” page for my antivirus and firewall package and I followed their advice. Download a free utility called SuperAntiSpyware. Like me, you might not have heard of it, but believe me – it works. The very first item on a full scan was listed as “Disabled Registry Editor” and when the scan had finished I allowed it to “fix” the faults found. End of problem. I have no connection whatsoever with SuperAntiSpyware, other than now being a very grateful user. By the way, as well as having no access to my Registry, I also had no access to System Restore. SuperAntiSpyware fixed that as well. Shahiem If i do Run-gpedit.msc It says cant find Im running on Windows 7 What now? Khan When i write GPedit.msc in RUN than press enter than give me a massage windows cannot find ‘GPedit.msc’ so what can i do? Tobi The Unhook thing works so well. Follow these simple steps: 1. copy and paste the file on note pad. 2. Save As UnHookExec.inf on the desktop. 3. Now right click on it and select install. 4. The job is done, your regedit is back. Pingback: Trick to Enable Show Hidden Files and Folders in Windows « My Digital Life TusharK hi,… thanks for the info. its work fine for workgroup computer. Any one try above setting for the Windows 2008 domain workstation with windows prof 7 OS installed. plz update Jubi Cool……..Thanks dude ..its really helpful… ashish thanxxxxx…dude it really works Pingback: Smart people please? – Near Reality Jokerkiller064 says MMC initialzing snap up shit HELP romar wow THNX so much man… it really works … Tejal thnx…….it really works……. zeus i m using win 7 but it say……..not found gpedit.msc..plz help……… Kaloy I am very thankful that i explored this kind of site…(more power) lakha thanxxxxxxxxxxxxxxxxxxxxxxxxx dear Pingback: [Warcraft 3] Increase your DotA FPS by 10 frames for FREE! – Page 20 – DotA Forums Nitin Thanks for the valuable information, I can able to fix the problem of Regedit hitesh i try above steps but still not working for me. i don’t want to format my pc Amit hello guys…..can anyone tell me what is the problem with my PC? when i try to open regedit or gpedt or taskmanager…. they appears in front of my screen but it suddenly disappears…will anyone help me ou tplease…………. Amit hello guys…..can anyone tell me what is the problem with my PC? when i try to open regedit or gpedt or taskmanager…. they appears in front of my screen but it suddenly disappears…will anyone help me ou tplease…………. Akash didnt work for me…i tried symantec, gpedit.something, it still shows the same message. Icoy got it. thanks! genaro Sir I have a small problem when I try to type the gpedit.msc “Its says that “Windows cannot find`gpedit.msc. Make Sure you type the name correctly “” T_T have any ideas???? just pm me here firstname.lastname@example.org saurabh thank u very very much suhail User Configuration -> Administrative Templates -> System sysm folder not to be seen plz help me Shashank JOshi Thanks – Shashank Joshi, SE, ICMS, CRIS. joe i have tried everything but nothing works to enable my registry. I disabled it myself, now when I try use vbscript file i get error that invalid root…. my email: email@example.com Kae hi. i can now open regedit.exe and my task manager but when i starts my pc a pop up always appear with a notice, rvhost is disabled.. blah blah blah.. and it annoys me. can somebody please help me remove this pop up. thanks a lot Sane Been searching for this one..This method worked for me. Method 1: Using Group Policy editor. Go to Run –> gpedit.msc In the left hand menu, go to User Config –> Administrative Templates –> System. Now In the right hand pane, select “Prevent access to registry editing tools”. Double click and Select Disabled or Not Configured and choose OK. and Done. Restart your system. Method 2: Go to Start –> Run, copy and paste the follow in the Run box and press OK. REG add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableRegistryTools /t REG_DWORD /d 0 /f Restart your system. mapuia If I can’t open gpedit.msc how can I do. sometime Administrator block gpedit.msc from client user not access group policy. Now I am in trouble that I can’t open gpedit.msc blocked by admin can You help to penetrate it. thank you http://mynosebleed.net Michael # Navigate to the following location: User Configuration -> Administrative Templates -> System # In the Settings pane, locate the Prevent access to registry editing tools option, and then double-click on it to open the settings dialog. Yeah I’ve did that I’ve enabled it but when I’m going to open RegEdit already it’ll say the same again ” disabled by the administrator Errr… farooq thanks to UnHOOkexic file, it helped me alot :-bd vishal very very thank you befor my pc d’not show hidden file after my pc show ok Rahul thank u so much..really helped Irene i can’t find system under administrative templates. help please.. tanner when i try to do this “cannot edit DisableCMD: error writing the values new contetns” pops up Soyer Thnx a lot the UnHookExec.inf works,thx a lot jatt Discovered: May 7, 2004 Updated: December 14, 2005 12:00:00 AM Type: Removal Information As part of their routine, many worms and Trojans make changes to the registry. Some of them change one or more of the shellopencommand keys. If these keys are changed, the worm or Trojan will run each time that you run certain files. For example, if the exefileshellopencommand key is changed, the threat will run each time that you run any .exe file. This may also stop you from running the Registry Editor to try to fix this. They may also change a registry value so that you cannot run the Registry Editor at all. Symantec Security Response has created a tool to reset these registry values to their default settings. WARNING: Do not use this tool unless: A Symantec technician or document directs you to do so. After reading the removal instructions in the writeup, you are sure that the tool is required. Follow these steps: Download the file UnHookExec.inf and save it to your Windows desktop. (If you cannot connect to the Internet from the infected computer, download to an uninfected computer then save it to a floppy disk. Then take the floppy disk and insert it in the floppy disk drive of the infected computer.) Note: The tool has a .inf file extension. Locate the download file, either on the Windows desktop or the floppy disk. Right-click the UnHookExec.inf file and click install. or copy and paste in u r note pad save as UnHookExec.inf and save in side u r admin folder or whatver u r acount name it and clilck it here is code [Version] Signature=”$Chicago$” Provider=Symantec [DefaultInstall] AddReg=UnhookRegKey [UnhookRegKey] HKLM, SoftwareCLASSESatfileshellopencommand,,,”””%1″” %*” HKLM, SoftwareCLASSEScomfileshellopencommand,,,”””%1″” %*” HKLM, SoftwareCLASSESexefileshellopencommand,,,”””%1″” %*” HKLM, SoftwareCLASSESpiffileshellopencommand,,,”””%1″” %*” HKLM, SoftwareCLASSES egfileshellopencommand,,,”regedit.exe “”%1″”” HKLM, SoftwareCLASSESscrfileshellopencommand,,,”””%1″” %*” HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem,DisableRegistryTools,0×00000020,0 (This is a small file. It does not display any notice or boxes when you run it.) Follow any other instructions for the threat that you are trying to remove. Chris While I can’t say I have had luck with this web page. The tips are valid however the Symantec file and the VBS script keep only coming up as text files. http://webringnet.com/ exinco my pc with vista business was attack by jambanmu.com, flash.10.exe and macromedia.10.exe. all desktop are blank (black screen). start button and task bar are disappear. cannot run regedit. i’m totally lost http://www.devbeans.com albert works great, thanks for this kundan thanx! Mani what to di when both regedit and gpedit.msc are diabled by administrator which happens generally. UweS. not bad, but that doesn’t work if the user isn’t able to run gpedit.msc. Most of the admins restrict this too. http://computersservicing.blogspot.com/ venkat symantec’s tool is very useful when registry is disabled,it also easy to use for beginers. Pingback: How to Disable Registry Editor Editing Tool (RegEdit) » My Digital Life Follow @TipTrickNet Get latest updates in email for free: Recent Articles Free 1000 Amazon Coins ($10) for Purchasing Any Android Apps How to Boot into Safe Mode (F8) in Windows 8 & 8.1 How to Remove or Show the Power Button on Windows 8.1 Start Screen Windows 8.1 Update Power User Guide for Business PDF Free Download How to Open Links from Windows 8 Store Apps (Metro/Modern) in Desktop IE More on Tip and Trick How To Completely Deactivate Pinterest Account Include Profile, Pins, Boards and Follows How To Completely and Permanently Delete & Remove Instagram Account Fitbit First Fitness Wearable Device Support Windows Phone 8.1 How to Set or Change the Default Font in Excel 2013 Xiaomi MI4 With Fastest Processors Features Review
No tags for this post.