Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account



Photo

What to use instead of NTREGOPT?


  • Please log in to reply
10 replies to this topic

#1
bizzybody

bizzybody

    Advanced Member

  • Member
  • PipPipPip
  • 367 posts
  • Joined 08-May 05

It appears that some recent "security" update to Windows 7 was aimed squarely at blocking good old NTREGOPT from being able to access the Registry.

 

I disabled Avast and turned off UAC and ran ntregopt as Administrator, while logged in with an account with administrator rights. No go, it's still completely blocked.

 

Is there another utility, free of ads and nags for $ for a "pro" version that does the same thing as ntregopt, but hasn't been blocked by Microsoft and anti-virus/malware?




How to remove advertisement from MSFN

#2
dencorso

dencorso

    Iuvat plus qui nihil obstat

  • Supervisor
  • 5,807 posts
  • Joined 07-April 07
  • OS:98SE
  • Country: Country Flag

Donator

Try to run NTREGOPT as the "Trusted Installer", instead of as Administrator.



#3
bizzybody

bizzybody

    Advanced Member

  • Member
  • PipPipPip
  • 367 posts
  • Joined 08-May 05

Not working. I got the runassystem and runastoken and the SetACL and the batch file to change the CLSIDs just sits there doing nothing after displaying its first line.

http://vorck.com/windows/ntauth.html

Edit: removed the -silent options and now it's visibly doing things...

Edit2: Still going, repeatedly saying setacl finished successfully

Edit3: Oh F this. Been running that batch file for about 45 minutes.

 

I put the runas and set acl exes in the same folder as ntregopt. When I run this batch file from an elevated command prompt, it stops and starts trusted installer then flashes another window and quits.

net stop trustedinstaller
net start trustedinstaller
runassystem64.exe "runfromtoken64.exe trustedinstaller.exe ntregopt.exe"
@ECHO OFF
ECHO Processing CLSID permissions
REM SET SETACLX64=C:\windows\system32\setaclx64.exe
FOR /F "tokens=1,2,3,4,5 delims=\" %%A IN ('REG.EXE query HKLM\SOFTWARE\Classes\CLSID\') DO (
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E" -ot reg -actn setowner -ownr "n:S-1-5-32-544;s:y" -rec yes -silent
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E" -ot reg -actn ace -ace "n:S-1-5-32-544;p:full;s:y;i:so,sc;m:set;w:dacl" -rec yes -silent
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E" -ot reg -actn ace -ace "n:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464;p:full;s:y;i:so,sc;m:revoke;w:dacl" -rec yes -silent
)

FOR /F "tokens=1,2,3,4,5 delims=\" %%A IN ('REG.EXE query HKCR\CLSID\') DO (
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E" -ot reg -actn setowner -ownr "n:S-1-5-32-544;s:y" -rec yes -silent
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E" -ot reg -actn ace -ace "n:S-1-5-32-544;p:full;s:y;i:so,sc;m:set;w:dacl" -rec yes -silent
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E" -ot reg -actn ace -ace "n:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464;p:full;s:y;i:so,sc;m:revoke;w:dacl" -rec yes -silent
)

FOR /F "tokens=1,2,3,4,5,6 delims=\" %%A IN ('REG.EXE query HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\') DO (
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E\%%F" -ot reg -actn setowner -ownr "n:S-1-5-32-544;s:y" -rec yes -silent
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E\%%F" -ot reg -actn ace -ace "n:S-1-5-32-544;p:full;s:y;i:so,sc;m:set;w:dacl" -rec yes -silent
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E\%%F" -ot reg -actn ace -ace "n:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464;p:full;s:y;i:so,sc;m:revoke;w:dacl" -rec yes -silent
)

FOR /F "tokens=1,2,3,4,5,6 delims=\" %%A IN ('REG.EXE query HKCR\Wow6432Node\CLSID\') DO (
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E\%%F" -ot reg -actn setowner -ownr "n:S-1-5-32-544;s:y" -rec yes -silent
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E\%%F" -ot reg -actn ace -ace "n:S-1-5-32-544;p:full;s:y;i:so,sc;m:set;w:dacl" -rec yes -silent
    SETACLX64 -on "%%A\%%B\%%C\%%D\%%E\%%F" -ot reg -actn ace -ace "n:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464;p:full;s:y;i:so,sc;m:revoke;w:dacl" -rec yes -silent
)

ECHO Complete

Edited by bizzybody, 01 May 2015 - 03:05 AM.


#4
jaclaz

jaclaz

    The Finder

  • Developer
  • 15,361 posts
  • Joined 23-July 04
  • OS:none specified
  • Country: Country Flag

Wait a minute.
 
Try EXACTLY the example given by Joakim
http://reboot.pro/fi...d-runfromtoken/
 
 

On one of my systems I have this simpel batch on my desktop to get quick access to my special power cmd:
 

net start trustedinstaller
C:\windows\system32\runassystem_x64 "C:\windows\system32\runfromtoken_x64 trustedinstaller.exe 1 cmd"

 

 
jaclaz



#5
cannie

cannie

    Advanced Member

  • Member
  • PipPipPip
  • 464 posts
  • Joined 04-June 08
  • OS:Windows 7 x86
  • Country: Country Flag

I use since long ago the freeware "Wise Registry Cleanerfor the same purpose. You may try it. Maybe it would be enough for your needs.

 

HTH


Edited by cannie, 01 May 2015 - 03:51 PM.


#6
xpclient

xpclient

    XP was my idea. 3rd party apps make NT6 my idea.

  • Member
  • PipPipPip
  • 341 posts
  • Joined 30-July 05
  • OS:XP Pro x64
  • Country: Country Flag

Sad. Thankfully ERUNT still works!!


Edited by xpclient, 02 May 2015 - 08:53 PM.

Impossible to run NT6 without third party fixes.


#7
NoelC

NoelC

    Software Engineer

  • Member
  • PipPipPipPipPipPipPipPip
  • 2,065 posts
  • Joined 08-April 13
  • OS:Windows 8.1 x64
  • Country: Country Flag

It appears that some recent "security" update to Windows 7 was aimed squarely at blocking good old NTREGOPT from being able to access the Registry.

 

I'm just curious...  Why do you think you need to "optimize your registry"?  What goes wrong if you don't?

 

-Noel



#8
jaclaz

jaclaz

    The Finder

  • Developer
  • 15,361 posts
  • Joined 23-July 04
  • OS:none specified
  • Country: Country Flag

I'm just curious...  Why do you think you need to "optimize your registry"?  What goes wrong if you don't?

 

NTREGOPT (JFYI) does not really-really "optimize" anything.

 

If you see the Registry as a Filesystem, NTREGOPT is the correponding to the DEFRAG command.

If you see the Registry as a Database, NTREGOPT is corresponding to the COMPACT or ZAP command.

 

The net effect of using regopt is to have a smaller size of the files composing the Registry and, since the entries in it are re-organized it will be (in theory) a tadbit faster (in practice I doubt that it is noticeable on modern machines).

 

@bizzibody

Completely UNLIKE tested (and lesser known):

http://www.winmend.c...egistry-defrag/

a list of similar apps to test:

http://alternativeto...egistry-defrag/

 

jaclaz



#9
NoelC

NoelC

    Software Engineer

  • Member
  • PipPipPipPipPipPipPipPip
  • 2,065 posts
  • Joined 08-April 13
  • OS:Windows 8.1 x64
  • Country: Country Flag

Well, I'm all for maximizing performance.  I just do it in different ways.  It really seems to me mucking around with the structure of the central database that runs everything is just asking for trouble - especially since Microsoft does a lot of its own maintenance at various times (go through the big list of scheduled jobs in a brand new system some time).

 

I'm particularly sensitive to the whole "registry cleaner" genre, because it's the kind of thing that has made its own market where no need really existed.  It's certain that more people have gotten themselves into trouble than have tuned up their systems with such junkware (not applying that to any particular product).  Microsoft is admittedly evil, but in this particular case I don't think they're actively trying to block people from using "registry optimization" software for no reason.

 

Do yourself a favor:  Ignore registry cleaners and invest in SSD storage if you want to see REAL performance gains.  Many things will become much more responsive. 

 

I'm here to tell you from a lot of experience that you really, really don't need to "defrag", "optimize", or "clean" your registry in order to have an efficient running Windows system virtually for forever.

 

-Noel



#10
xpclient

xpclient

    XP was my idea. 3rd party apps make NT6 my idea.

  • Member
  • PipPipPip
  • 341 posts
  • Joined 30-July 05
  • OS:XP Pro x64
  • Country: Country Flag

NTRegOpt is not a Registry cleaner. Registry cleaners are a truly useless trashware/snake oil that everyone should stay away from just like "OS tuning/optimizing tools". NTRegOpt merely rewrites the Registry in a single contiguous way.

 

According to its description "The program works by recreating each registry hive "from scratch", thus removing any slack space that may be left from previously modified or deleted keys. Note that the program does NOT change the contents of the registry in any way, nor does it physically defrag the registry files on the drive (as the PageDefrag program from SysInternals does). The optimization done by NTREGOPT is simply compacting the registry hives to the minimum size possible."

 

But on modern machines and OSes (post Windows XP SP2 where Registry is loaded in the system cache and has built-in optimizations to reduce fragmentation), it wouldn't make much difference even if you don't use it. Windows 2000 and earlier would benefit from NTRegOpt.

 

Now I would be seriously p***ed off if they broke ERUNT.


Edited by xpclient, Today, 05:43 AM.

Impossible to run NT6 without third party fixes.


#11
jaclaz

jaclaz

    The Finder

  • Developer
  • 15,361 posts
  • Joined 23-July 04
  • OS:none specified
  • Country: Country Flag

@NoelC

You completely missed the point. :ph34r:

Too bad :(.

 

NTREGOPT IS NOT a "Registry cleaner", it IS NOT a "Registry optimizer", it is a Registry defragmenter or a Registry compacter.

 

A filesystem (from time to time) is likely to work better if defragmented.

A database (from time to time) is likely to work better if compacted.

 

Whichever way you like to see the Windows Registry, it is better to do some maintenance on it (from time to time).

 

Then, we may want to discuss the opportunity of using an actual "Registry cleaner", which may be better discussed here:

http://www.msfn.org/...n-windows-7-81/

 

 

jaclaz






2 user(s) are reading this topic

1 members, 1 guests, 0 anonymous users


    NoelC