[olocin]

hi gud day, i have a problem about User Restrictions in my OS win2kProf. When i was trying to edit user configuration in particular the "Run only allowed windows application" enabled it and added one application, when i click ok, suddenly i was not able to run .exe anymore cant even run documents, i was aware of this but it was an accident to add only 1 application. So the problem was how will i set the User restrictions to be back to its default configuration? or disable or set the "Run only allowed windows application" to not configured?

[valter]

If that's the only restriction you've made, use secedit command to reset policy to its default

[olocin]

yah ive added only one program to run, but how can i run secedit if it traps all executable files, it can only open window explorer search files but it cant run application, can i edit the secedit on DOS? coz i can boot on DOS to edit the secedit

[olocin]

secedit /configure [/DB filename ] [/CFG filename ] [/overwrite][/areas area1 area2...] [/log logpath] [/verbose] [/quiet]
--------- is this the code?
i dont know the DB Filename the CFG Filename, areas and log path cant you help me? ang give me an example? thank you

[valter]

Can't really recal exact file name for the default policy but one db file is for standalone and another is for domain controller, so you have to be carefull with that ... anyway, try these articles

http://support.microsoft.com/default.aspx?...kb;en-us;226243

http://support.microsoft.com/default.aspx?...kb;en-us;267553

[olocin]

hi thank you so much, i think this solvesmy probelm.. but i cant locate the folder sysvol? im using win2k prof. service pack2. even the gptmpl.inf cant find it, y is dat?

[valter]

SYSVOL is present only on the server after installation of the Active Directory

[olocin]

im lost, wat will i do then will you guide me please

[valter]

This should solve your problem, this is the tool from Microsoft that resets policy to the default ....

http://www.microsoft.com/downloads/details...&DisplayLang=en

[olocin]

thank you for the help, really thank you for giving me your time, Thanks

[valter]

did you make it?

[olocin]

nah. i didnt, the link you gave is an exe file. i cant run exe files since the disabled all .exe applications i first link you gave wud probably solve my problem, the only thing is dat i dont have sysvol

[valter]

Well I'm sorry to hear that, anyway, post here a request for basicwk.inf file. This file is the default policy for Windows 2000 Professional

[olocin]

if i will replace basicwk.inf will it reset the policy? or i will have to do something special to edit it? thank you for ur time and help

[valter]

Try replacing the basicwk.inf and then use command SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE

before you do anything make sure you save the current basicwk.inf

[olocin]

THANKS ILL TRY IT,