lock down gpedit using registry

the.kaushik · 06-09-2006, 03:49 AM

common friends.. pls help me out.. i want to lock the gpedit by any means using VB. any way is it there??

Vishal Gupta · 06-09-2006, 02:59 PM

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\DisallowRun

Create a new STRING value with the name any number (u can give it name 1) and set its value to gpedit.msc

the.kaushik · 07-09-2006, 03:23 PM

ya this way works only for if u want to get it from run command.. what if i search for gpedit and click on it???

any idea

Vishal Gupta · 07-09-2006, 03:37 PM

No! It'll not run in any case!

the.kaushik · 10-09-2006, 02:38 AM

buddy i tried and told

Vishal Gupta · 10-09-2006, 03:30 AM

Very strange

I tried the same method for notepad.exe and each time I tried to run Notepad from RUN, Programs Menu, from Windows folder and also from System32 folder, I got ERROR that it has been disabled by the administrator!

Make sure u put the full application name gpedit.msc

thadhanihemant · 10-09-2006, 01:02 PM

vishal can u tell me whether by any means group policy can be runned in the windows xp home edition sp2..

Vishal Gupta · 10-09-2006, 04:06 PM

Copy following files from a XP Professional edition and then:

1.) Extract to C:\Windows\system32:

appmgmts.dll
appmgr.dll
fdeploy.dll
gpedit.msc
gpedit.dll
gptext.dll
fde.dll

2.) Extract the following files to C:\Windows\system32\GroupPolicy\Adm (This directory doesn't exist, so create it):

system.adm
inetres.adm
conf.adm

3.) Now type the following commands in a command window:

regsvr32 gpedit.dll
regsvr32 fde.dll
regsvr32 gptext.dll
regsvr32 appmgr.dll
regsvr32 fdeploy.dll

It should enable gpedit.msc in Home Edition

source

PS: Also u can try Doug's Windows XP Security Console, its an alternative for gpedit.msc for Home Edition.

the.kaushik · 13-09-2006, 09:43 PM

Quote:

Originally Posted by Vishal Gupta

Very strange

I tried the same method for notepad.exe and each time I tried to run Notepad from RUN, Programs Menu, from Windows folder and also from System32 folder, I got ERROR that it has been disabled by the administrator!

Make sure u put the full application name gpedit.msc

ok what i did was when i tried with run it shows blocked but what i did was just in the search i searched for gpedit.msc.. it showed 3 or 4 files and i clicked the one we need to block and it opened.. u check once and see if it works with gpedit or not in u pc pls

Vishal Gupta · 13-09-2006, 11:25 PM

Yeah! Strange it doesnt work for gpedit.msc

What u can try, is just rename the gpedit.msc file to something else, like regedit.msc or nething u want

Then whenever a user will try to run gpedit.msc, he'll get ERROR

Also don't forget to HIDE the file!

thadhanihemant · 18-09-2006, 02:57 PM

Quote:

Originally Posted by Vishal Gupta

Copy following files from a XP Professional edition and then:

1.) Extract to C:\Windows\system32:

appmgmts.dll
appmgr.dll
fdeploy.dll
gpedit.msc
gpedit.dll
gptext.dll
fde.dll

2.) Extract the following files to C:\Windows\system32\GroupPolicy\Adm (This directory doesn't exist, so create it):

system.adm
inetres.adm
conf.adm

3.) Now type the following commands in a command window:

regsvr32 gpedit.dll
regsvr32 fde.dll
regsvr32 gptext.dll
regsvr32 appmgr.dll
regsvr32 fdeploy.dll

It should enable gpedit.msc in Home Edition

source

PS: Also u can try Doug's Windows XP Security Console, its an alternative for gpedit.msc for Home Edition.

thanks alot buddy..........