BetaONE will rise again! - Windows XP

BetaONE will rise again! (http:\\b1.hcanet.com\forum/index.php)

- Software Support (http:\\b1.hcanet.com\forum/forumdisplay.php?f=45)

- - Windows XP - Restricted (http:\\b1.hcanet.com\forum/showthread.php?t=14594)

Windows XP - Restricted

Hi guys,

I wonder if you guys could help. Today our IT department changed us over to a new network server/domain and now they subjected us to MS Active Directory.

This means that we fall under group policies and now there is lots of restrictions applied. I can't for e.g. see all the control panel options and they also took away the option for us to customize our desktops/appearances. There is lots of other option that has been removed.

Is there something I could do to get some of the options back? (Without asking the IT guys ofcource ;) )

Looking forward to your help/suggestions.

Thank you
J...

Not without the proper priveledges, it's all in the permissions and groups and unless you have them your stuck.

Quote:

Originally Posted by kamikazee

Not without the proper priveledges, it's all in the permissions and groups and unless you have them your stuck.

Thought as much, Martin also confirmed that is hopeless.

I tried whatever I could think of, but failed miserably. Tried getting access to the registry, but that's also blocked. Even tried a third party editor and that also bombed out.

Well, I will have to live with the fact that I'm restricted. Bastards (Hehe)

Thnx for the help though

Cheers
J...

Unfortunately there is not much you can do since all your permissions/settings are passed down the domain via the DC everytime you sign on to the domain.

Did they remember to block gpedit.msc. lol

Can u still add to the registry? If so try:

Code:



Windows Registry Editor Version 5.00



[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"DisableRegistryTools"=dword:00000000



[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"**.del.DisableRegistryTools"=-



[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"DisableRegistryTools"=dword:00000000



[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"**del.DisableRegistryTools"=-



[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoSaveSettings"=dword:00000000

lol

Have you tried Windows XP Power toys? There are tons of methods u can try. Though if they are smart then yea you are scewed and I recommand u do nothing or you shall be fired very soon. I would already have fired u. ;) I monitor everything. And part of useage agreement would be that you try nothing to over-ride secuirty matters. No matter how small. ;) Or if it has nothing to do with secutiy like the screen saver. :p

Quote:

Originally Posted by war59312

Did they remember to block gpedit.msc. lol

Can u still add to the registry? If so try:

Code:

 

 Windows Registry Editor Version 5.00

 

 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

 "DisableRegistryTools"=dword:00000000

 

 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

 "**.del.DisableRegistryTools"=-

 

 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]

 "DisableRegistryTools"=dword:00000000

 

 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]

 "**del.DisableRegistryTools"=-

 

 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

 "NoSaveSettings"=dword:00000000

You are what I like to call in the IT world, a 'Network Nazi', you are my idol!!

I wouldn't suggest this, if they've set-up there security properly they will be able to find the person who tampered with the registry to over-ride their security settings, and if so i'm sure it could lead to termination, it would here. No questions asked and straight out the door.

I for one would jut run linux, live version. ;)

also do they update the regestry regularly from the server to prevent modifications? I know Dell did this alot on us tech support people. they figure anyone who is not certified is inferior to them( just my opinion)

Quote:

Originally Posted by war59312

Did they remember to block gpedit.msc. lol

Can u still add to the registry? If so try:

Code:

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"DisableRegistryTools"=dword:00000000

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"**.del.DisableRegistryTools"=-

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"DisableRegistryTools"=dword:00000000

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"**del.DisableRegistryTools"=-

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoSaveSettings"=dword:00000000

Hehe. I can't add to the registry. They blocked that lol. It's just very tempting to see what you can manage to bypass with the security settings in place. It's more a challenge then anything else. I can access gpedit.msc tho.

They have also blocked tweakui.exe, so not much chance of getting things changed. I did however manage to run some control panel command through the "run" command. e.g. control international.

Thnx for the help tho.