Edit Windows 98 System Policies?

[Jedis]

I'm trying to change some permissions on a Windows 98 computer.

If I load up System Policy Editor, I can only edit the default user or the user currently logged in. I have a user, lets call him Dave, that has everything disabled. Desktop icons hidden, no start menu except Log off, Programs, and Help options. The programs are restricted so he can only run a handful of programs.

But now I need to edit these restrictions. The person who originally set this up is not here anymore, so I'm not sure how to fix it. Deleting the user isn't an option. I do have Admin access on the computer to edit the registry and can run System Policy Editor as the Admin. The only way I know of undoing these options is directly from his desktop, but I can't do it since it's disabled.

Is there a way to bring up the options that are disabled from the Admin desktop?

[Cactus]

Hi,

It's probable that the system is using a policy file witch sets the restrictive settings for Dave. Login as a user witch is able to use poledit, open the registry with it, and find out from witch location what policy file is loaded. This setting is a machine setting, and is somewhere under the network branch. Now open this policy file and edit the user Dave. Set or unset specific options, but don't 'grey them out' for that policy won't be set.
If the file is at a network location and you can't edit the file just create a new file and point the machine to this new file. This way you can setup you own policy.

Hope this make sence and helps,

[~*McoreD*~]

Hi there Jedis,

Sound complicated.
I will try to clear some nots here.
It look likes you have at least one account to load System Policy Editor up.

'Open System Policy Editor
Try
Start > Programs > Accessories > System Tools > System Policy Editor
Catch
Start > Run > POLEDIT
End Try

Ah now I see Cactus as already replied.

As your last resort, I think you can always over ride any security settings specified to each user. Am I right Cactus?

'In System Policy Editor
File > Open Registry
Double Click Local User
Go through all the trees and Uncheck any restrictions

All the best,
McoreD

[Jedis]

Quote:

Originally posted by Cactus@Feb 17 2004, 07:29 AM
Hi,

It's probable that the system is using a policy file witch sets the restrictive settings for Dave. Login as a user witch is able to use poledit, open the registry with it, and find out from witch location what policy file is loaded. This setting is a machine setting, and is somewhere under the network branch. Now open this policy file and edit the user Dave. Set or unset specific options, but don't 'grey them out' for that policy won't be set.
If the file is at a network location and you can't edit the file just create a new file and point the machine to this new file. This way you can setup you own policy.

Hope this make sence and helps,

Will this work if the restrictions were not set using the win98 provided System Policy Editor?

[Jedis]

Quote:

Originally posted by ~*McoreD*~@Feb 17 2004, 07:40 AM
As your last resort, I think you can always over ride any security settings specified to each user. Am I right Cactus?

'In System Policy Editor
File > Open Registry
Double Click Local User
Go through all the trees and Uncheck any restrictions

I checked this and if I remember correctly, the default user did not have any restrictions. If I close the login prompt window, instead of going into the Default user, it goes into the user 'Dave'. 'Dave' does not have a password set.

However, I can fill in the Admin login and password to get into the Admin desktop.

[Jedis]

Still need help with this...

Basically, I need to change the screen saver and power management options on the system. The user 'Dave' only has a few options in the start menu - Programs, Help, Logoff. Right clicking on start has the open and explore options grayed out.

If I set a screensaver on the Admin desktop, it is not taking effect on the 'Dave' desktop. I can run regedit under the Admin desk, but can't seem to find 'Dave's settings in there. Only Admin and Default User. Anyway I can load his settings so I can change options, or temporarily disable all restrictions on his desktop?

Poledit was not working, as I have no way to run it from the 'Dave' desktop. I can only change the Default User settings with Poledit from what I can see, from the Admin desktop.