Shulou(Shulou.com)06/01 Report--

This article is about how to solve the problem that gpedit.msc cannot run and prompt that this operation has been cancelled due to the restrictions of this computer. The editor thinks it is very practical, so I share it with you. I hope you can get something after reading this article.

The above situation, you can refer to the remarks in the registry can be repaired, but the most important thing is that I have not run the windows application will be the registry, net.exe and other exe files added, but also will prevent access to the registry editor, and prevent access to the command prompt have been set and enabled, so that everything can not be opened. The most abominable thing is that I set it on the server (through 3389), which is easy to solve locally. You can press F8 to enter safe mode and enter gpeidt.msc to cancel "run only licensed windows applications". In fact, our goal is how to solve this problem in the above environment, the server, ah, can not be done locally, there are multiple websites on it, and the system cannot be simply redone.

Fortunately, I read the following articles on the Internet, which are all good solutions, but no commands can be used in the above environment.

The code is as follows:

Run-gpedit.msc

Enter the gpedit.msc group policy, user configuration-"Administrative templates -" Windows components-"Windows Explorer -" prevent access to the drive from "my computer" (line 12 from top to bottom), find that the default setting (not configured) has not been modified, modify the configuration to "enabled", and select disk C, confirm and then re-enter, change the configuration back to "unconfigured", and disk C returns to normal.

Try the following:

Run-gpedit.msc

Enter gpedit.msc Group Policy, user configuration-- Administrative templates-- Windows components-- Windows Explorer-- prevent access to drives from my computer (line 12 from top to bottom)

=

One: when running "gpedit.msc" (Group Policy), the system will prompt: this operation is cancelled due to computer restrictions, please contact the administrator and I found that sometimes running other programs will report the same error, but I am logged in as an administrator. Excuse me, what should I do?

Solution: check to see if the "run only licensed Windows applications" policy is set, and gpedit.msc itself is not added to programs that allow the system to run. Open a command prompt and enter: mmc c:\ windows\ system32\ gpedit.msc. If CMD is also disabled, you can restore, restart the computer, press F8 at startup, select "safe mode with command line prompt" to start, the system will automatically run the CMD command window, now you can run at the prompt: mmc c:\ windows\ system32\ gpedit.msc, which will open the group policy. Expand the user configuration → Management template → system, find the "run only licensed Windows applications" policy on the right, set it to "unconfigured", and then "OK".

Two:

Method 1. Save the following three lines of code as a file with a .reg extension, such as un.reg, and then double-click the file to import the contents into the registry--

[HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Policies\ System]

"DisableRegistryTools" = dword:00000000

Method 2. Run gpedit.msc, and then open

"Local computer" policy-user configuration-after the system branch

Double-click to disable the registry editing tool

Select enable to not use regedit.exe and regedt32.exe

Select disable to use regedit.exe and regedt32.exe.

For more settings on system security optimization, remove the "√" symbol from the regedit that instructs you to disable the registry and open it again!

Third, solve the lock problem of Windows XP group policy.

1. Planned task method

Open the Control Panel → Task Plan and launch the wizard to create a task schedule called MMC. The program to execute is "C:\ Windows\ System32\ mmc.exe". When finished, right-click the newly created MMC in the task plan window and select "run". In the open console program window, click "File" → "Open" in the menu bar, navigate to the "C:\ Windows\ System32\ gpedit.msc" program, open the group policy editing window, and expand "Local computer Policy" → "user configuration" → "Management template" → "system". Double-click run only licensed Windows applications in the right pane and set it to unconfigured in the pop-up window. Click OK to exit and close the Group Policy editing window, and when the system pops up the "Save changes to gpedit.msc" question window, click Yes to save to unlock it.

two。 Safety model method

In fact, this restriction of Group Policy is achieved by loading registry-specific key values, which is not loaded in safe mode. Press and hold the F8 key after rebooting, and in the open multi-startup menu window, select safe Mode with Command prompt. After entering the desktop, type "C:\ Windows\ System32\ mmc.exe" at the startup command prompt, start the console, then follow the above operation to lift the restrictions, and finally restart the normal login system to unlock. In addition, many restrictions on Group Policy do not take effect in safe mode, so if you encounter restrictions that cannot be lifted, you might as well go down and find a solution.

Renaming procedure method, renaming procedure method

3. Renaming procedure method

When you set the "run only licensed windows applications" policy, you need to add allowed programs to the list. If you remember the name of the licensed running program that was set, and add any of the .com, .bat, .exe files to the allowed list, for example, only "qq.exe" is allowed, then you can open the "C:\ Windows\ System32" folder and rename the mmc.exe program to qq.exe. Just run it again. Similarly, if you want to keep the limit, you can rename the program you need to run to qq.exe, but others can only run QQ when they use the computer. If the list of programs allowed to run contains regedit.exe, you can also open the registry, expand the "HKEY_LOCAL_ MACHINE\ SOFTWARE\ Microsoft\ WindowsNT\ CurrentVersion\ Winlogon" branch, and double-click the Userinit subkey in the window on the right. In the window that opens, change its value to "C:\ Windows\ System32\ userinit.exe,mmc.exe" to enable mmc.exe boot. After this modification and restart, the console will be automatically run the next time you boot to open the Group Policy Editor and unlock it.

4. Renaming procedure method

This setting of Group Policy can only prevent users from starting programs from Windows Explorer, but many programs in the system can be run independently. For example, desktop processes, system services, system screen savers, etc. loaded at boot time, are not blocked, so just replace mmc.exe with the above files. To replace the screen saver logon.scr, first open the "C:\ Windows\ System32\ dllcache" folder, find the logon.scr file and copy it to D:\ disk, and then delete the screensaver file in the "C:\ windows\ System32\ dllcache" folder to prevent the system's file protection function from preventing us from changing and deleting system files, and the system will pop up "the system file has been changed to an unrecognized version." Please insert the query window for WinXP SP2 CD repair and click cancel. Then open the "C:\ Windows\ System32" folder, find the logon.scr file to delete it, and rename mmc.exe to logon.scr.

Back to the desktop, right-click in the space to select "Properties", in the pop-up window, click the "screen saver" tab, then in the screen saver list select "logon", click "Preview", although the system will prompt you not to find the selected file, but in the background started the console program "mmc.exe", its settings can be lifted. Note that after completing the operation, it is best to copy the d:\ logon.scr file back to the original folder.

5. Combined key starting method

Although all programs on the system are locked, pressing the Ctrl+Alt+Del key combination starts the task manager. Now that you can start the taskmgr.exe program through key combination. Then you can start Group Policy to unlock as long as you replace taskmgr.exe with mmcexe. As above, first go to the "C:\ Windows\ System32\ dllcache" folder, find the taskmgr.exe program and rename it to taskmgr1.exe, then go to the "C:\ Windows\ System32" folder, locate and rename the taskmgr.exe file to taskmgr1.exe. Now rename the mmc.exe file to taskmgr.exe, and then press the Ctrl+Alt+Del key combination, and you will find that the console program is started. Once the group policy is set, restore the task manager to its original name.

Four:

Click on the things in the Control Panel, there will be this prompt, according to the above methods can not be solved. In fact, the real reason is to modify the registry: HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\ Policies\ Explorer "DisallowRun" = dword:00000001 Please delete the above DisallowRun key to solve this restriction.

Five: please check whether you are logged in as an administrator.

=

In addition, I also saw on a blog that I use a "shadow to disable enabling tool" software, but I don't know how to do it.

The original text is as follows:

A small software is easy to solve: shadow disable enable tool V1.01 official version enter MMC.EXE below choose to enable the above program

Actually, I just saw 5. Inspired by the key combination method, I tried to get into the planned task, but I was able to boldly create a new planned task.

Start-- Settings-- Control Panel-- schedule tasks-- add scheduled tasks-- name whatever you want-- browse to the program location (c:\ windows\ system32\ gpedit.msc), as shown in the following figure.

Then on the top of the task-- right-click-- start, and the most desired group policy editing window comes out.

The above is how to solve the problem that gpedit.msc can not run and prompt that this operation has been cancelled due to the limitation of this computer. The editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.