-
Registry problem
Ok, here's the deal: My roommate used my laptop and started fiddling with the registry. He mostly knows what he's doing... He was testing out a reg "hack" that disables the use of certain programs on a given user profile. He was stupid enough to try it on his own. So what he ended up doing is disabling access to ALL programs but the one he tried to disable. Meaning, Winamp is the only program that can be opened. I know where this key is located, so what i'm wondering is if i can remotely access his accounts reg from the admin account.
I tried opening up the reg through the admin account but that key and subkey is not there. He used this website to get his info:
http://www.kellys-korner-xp.com/win_xp_logon.htm
What he tried to do was Restrict Applications Users Can Run.
He made a backup before hand but windows won't let him run the reg file.
Quite a perdicament...
-
-
Tried that. He can't run any excecutable file. Last known good config did nothing. Is there any way to access the reg via the Admin account?
According to Kellys-korner the damage is irreversable, but I'm positive the good people of Techzonez have a solution.
-
Right, so going to HKEY_USERS gives me access to the reg keys that were added. Next time I use my head before posting :) Thanks for the help anyway
-
Have you tried restoring the registry backup or using system restore in Safe Mode ?
-
His user registry is under his SID in the HKEY_USERS key you just need to identify his SID (looks like S-1-5-220-xxxxx...) or look through them all until you find the key you are looking for (use RegSeeker). You can also use LoadHive to load his registry in an external boot environment like BartPE.
Enjoy.