Registry Write Protected

Warren · Apr 12, 2008

I was trying to disable some programs from starting up by editing registry,
when I noticed that none of my changes are taking effect. I have no idea
how or when it became locked.

How do you unlock it?

MEB · Apr 13, 2008

"Warren" <nospam@nospam.com> wrote in message
news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
| I was trying to disable some programs from starting up by editing
registry,
| when I noticed that none of my changes are taking effect. I have no idea
| how or when it became locked.
|
| How do you unlock it?
|

Likely you have some other program that dis-allows modification. That
presumes you DID shutdown and restart after the changes.

Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak programs
as well], to see if they provide that protection [system and/or file
protection].

Check this key and entries [standard]:
------
REGEDIT4

[HKEY_CLASSES_ROOT\regfile]
@="Registration Entries"

[HKEY_CLASSES_ROOT\regfile\DefaultIcon]
@="C:\\WINDOWS\\regedit.exe,1"

[HKEY_CLASSES_ROOT\regfile\shell]
@=""

[HKEY_CLASSES_ROOT\regfile\shell\open]
@="Mer&ge"

[HKEY_CLASSES_ROOT\regfile\shell\open\command]
@="regedit.exe \"%1\""

[HKEY_CLASSES_ROOT\regfile\shell\print]
@=""

[HKEY_CLASSES_ROOT\regfile\shell\print\command]
@="C:\\WINDOWS\\NOTEPAD.EXE /p %1"

[HKEY_CLASSES_ROOT\regfile\shell\edit]
@="&Edit"

[HKEY_CLASSES_ROOT\regfile\shell\edit\command]
@="C:\\WINDOWS\\NOTEPAD.EXE %1"

--------------

The above can be used to reset regedit to default activities by copying the
above to a TEXT editor, saving as a .reg, and merging, or by manual editing.
Manual editing should only be done by parties who understand a single wrong
entry may cause problems with their computer.

--
MEB http://peoplescounsel.orgfree.com
--
_________

Warren · Apr 13, 2008

Thanks MEB,

There was only one small difference, regarding how the right mouse click
works on reg files ([HKEY_CLASSES_ROOT\regfile\shell]
@=""). I loaded your file anyway. I noticed I could manually change the
string value from "" to "edit" and confirmed the change in the right click
context menu of .reg files.

Which means the Registry isn't locked as I thought, instead I'm doing
something wromg in my attempt to prevent programs from starting up. I am
trying to remove some string entries in the
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] key, to
prevent those programs from starting up at bootup, but the system won't let
me. What am I doing wrong ?

"MEB" <meb@not here@hotmail.com> wrote in message
news:%23V$Bg9SnIHA.4504@TK2MSFTNGP06.phx.gbl...
> "Warren" <nospam@nospam.com> wrote in message
> news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
> | I was trying to disable some programs from starting up by editing
> registry,
> | when I noticed that none of my changes are taking effect. I have no
idea
> | how or when it became locked.
> |
> | How do you unlock it?
> |
>
> Likely you have some other program that dis-allows modification. That
> presumes you DID shutdown and restart after the changes.
>
> Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak
programs
> as well], to see if they provide that protection [system and/or file
> protection].
>
> Check this key and entries [standard]:
> ------
> REGEDIT4
>
> [HKEY_CLASSES_ROOT\regfile]
> @="Registration Entries"
>
> [HKEY_CLASSES_ROOT\regfile\DefaultIcon]
> @="C:\\WINDOWS\\regedit.exe,1"
>
> [HKEY_CLASSES_ROOT\regfile\shell]
> @=""
>
> [HKEY_CLASSES_ROOT\regfile\shell\open]
> @="Mer&ge"
>
> [HKEY_CLASSES_ROOT\regfile\shell\open\command]
> @="regedit.exe \"%1\""
>
> [HKEY_CLASSES_ROOT\regfile\shell\print]
> @=""
>
> [HKEY_CLASSES_ROOT\regfile\shell\print\command]
> @="C:\\WINDOWS\\NOTEPAD.EXE /p %1"
>
> [HKEY_CLASSES_ROOT\regfile\shell\edit]
> @="&Edit"
>
> [HKEY_CLASSES_ROOT\regfile\shell\edit\command]
> @="C:\\WINDOWS\\NOTEPAD.EXE %1"
>
> --------------
>
> The above can be used to reset regedit to default activities by copying
the
> above to a TEXT editor, saving as a .reg, and merging, or by manual
editing.
> Manual editing should only be done by parties who understand a single
wrong
> entry may cause problems with their computer.
>
> --
> MEB http://peoplescounsel.orgfree.com
> --
> _________
>
>
>

glee · Apr 13, 2008

What do you mean by "the system won't let me"? Are you getting a message saying you
are prohibited from performing the action? How exactly is the system stopping you?

OR, are you just assuming the "system won't let you" because the items are coming
back into the startup list?

If you just remove an item in the Run key, but don't turn off the option in the
associated program to "run at startup" (or similar), the entry will just be added
right back again.

What programs are you trying to remove from startup?
--
Glen Ventura, MS MVP Windows, A+
http://dts-l.net/
http://dts-l.net/goodpost.htm

"Warren" <nospam@nospam.com> wrote in message
news:uQ9WADVnIHA.1768@TK2MSFTNGP05.phx.gbl...
> Thanks MEB,
>
> There was only one small difference, regarding how the right mouse click
> works on reg files ([HKEY_CLASSES_ROOT\regfile\shell]
> @=""). I loaded your file anyway. I noticed I could manually change the
> string value from "" to "edit" and confirmed the change in the right click
> context menu of .reg files.
>
> Which means the Registry isn't locked as I thought, instead I'm doing
> something wromg in my attempt to prevent programs from starting up. I am
> trying to remove some string entries in the
> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] key, to
> prevent those programs from starting up at bootup, but the system won't let
> me. What am I doing wrong ?
>
>
> "MEB" <meb@not here@hotmail.com> wrote in message
> news:%23V$Bg9SnIHA.4504@TK2MSFTNGP06.phx.gbl...
>> "Warren" <nospam@nospam.com> wrote in message
>> news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
>> | I was trying to disable some programs from starting up by editing
>> registry,
>> | when I noticed that none of my changes are taking effect. I have no
> idea
>> | how or when it became locked.
>> |
>> | How do you unlock it?
>> |
>>
>> Likely you have some other program that dis-allows modification. That
>> presumes you DID shutdown and restart after the changes.
>>
>> Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak
> programs
>> as well], to see if they provide that protection [system and/or file
>> protection].
>>
>> Check this key and entries [standard]:
>> ------
>> REGEDIT4
>>
>> [HKEY_CLASSES_ROOT\regfile]
>> @="Registration Entries"
>>
>> [HKEY_CLASSES_ROOT\regfile\DefaultIcon]
>> @="C:\\WINDOWS\\regedit.exe,1"
>>
>> [HKEY_CLASSES_ROOT\regfile\shell]
>> @=""
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\open]
>> @="Mer&ge"
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\open\command]
>> @="regedit.exe \"%1\""
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\print]
>> @=""
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\print\command]
>> @="C:\\WINDOWS\\NOTEPAD.EXE /p %1"
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\edit]
>> @="&Edit"
>>
>> [HKEY_CLASSES_ROOT\regfile\shell\edit\command]
>> @="C:\\WINDOWS\\NOTEPAD.EXE %1"
>>
>> --------------
>>
>> The above can be used to reset regedit to default activities by copying
> the
>> above to a TEXT editor, saving as a .reg, and merging, or by manual
> editing.
>> Manual editing should only be done by parties who understand a single
> wrong
>> entry may cause problems with their computer.
>>
>> --
>> MEB http://peoplescounsel.orgfree.com
>> --
>> _________
>>
>>
>>
>
>

Warren · Apr 13, 2008

Sorry folks, I think I've discovered the culprit. I run Ad-aware AD-watch
and there's a thousand options in there, one of which was blocking changes
to the start-up section of the registry. A good security feature, but .....
drives you crazy when you forget about it.

I figured it out by installing a little proggy called regmon.exe, which
monitors all activity in the Registry. I saw Ad-watch fly by in the
scrolling processes when I tried to edit the registry.

"glee" <glee29@spamindspring.com> wrote in message
news:%23xyl13XnIHA.944@TK2MSFTNGP05.phx.gbl...
> What do you mean by "the system won't let me"? Are you getting a message
saying you
> are prohibited from performing the action? How exactly is the system
stopping you?
>
> OR, are you just assuming the "system won't let you" because the items are
coming
> back into the startup list?
>
> If you just remove an item in the Run key, but don't turn off the option
in the
> associated program to "run at startup" (or similar), the entry will just
be added
> right back again.
>
> What programs are you trying to remove from startup?
> --
> Glen Ventura, MS MVP Windows, A+
> http://dts-l.net/
> http://dts-l.net/goodpost.htm
>
>
> "Warren" <nospam@nospam.com> wrote in message
> news:uQ9WADVnIHA.1768@TK2MSFTNGP05.phx.gbl...
> > Thanks MEB,
> >
> > There was only one small difference, regarding how the right mouse click
> > works on reg files ([HKEY_CLASSES_ROOT\regfile\shell]
> > @=""). I loaded your file anyway. I noticed I could manually change
the
> > string value from "" to "edit" and confirmed the change in the right
click
> > context menu of .reg files.
> >
> > Which means the Registry isn't locked as I thought, instead I'm doing
> > something wromg in my attempt to prevent programs from starting up. I
am
> > trying to remove some string entries in the
> > [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] key,
to
> > prevent those programs from starting up at bootup, but the system won't
let
> > me. What am I doing wrong ?
> >
> >
> > "MEB" <meb@not here@hotmail.com> wrote in message
> > news:%23V$Bg9SnIHA.4504@TK2MSFTNGP06.phx.gbl...
> >> "Warren" <nospam@nospam.com> wrote in message
> >> news:u0CDAbQnIHA.5472@TK2MSFTNGP03.phx.gbl...
> >> | I was trying to disable some programs from starting up by editing
> >> registry,
> >> | when I noticed that none of my changes are taking effect. I have no
> > idea
> >> | how or when it became locked.
> >> |
> >> | How do you unlock it?
> >> |
> >>
> >> Likely you have some other program that dis-allows modification. That
> >> presumes you DID shutdown and restart after the changes.
> >>
> >> Check your Anti-Virus, Anti-SpyWare, and like programs [any tweak
> > programs
> >> as well], to see if they provide that protection [system and/or file
> >> protection].
> >>
> >> Check this key and entries [standard]:
> >> ------
> >> REGEDIT4
> >>
> >> [HKEY_CLASSES_ROOT\regfile]
> >> @="Registration Entries"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\DefaultIcon]
> >> @="C:\\WINDOWS\\regedit.exe,1"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell]
> >> @=""
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\open]
> >> @="Mer&ge"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\open\command]
> >> @="regedit.exe \"%1\""
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\print]
> >> @=""
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\print\command]
> >> @="C:\\WINDOWS\\NOTEPAD.EXE /p %1"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\edit]
> >> @="&Edit"
> >>
> >> [HKEY_CLASSES_ROOT\regfile\shell\edit\command]
> >> @="C:\\WINDOWS\\NOTEPAD.EXE %1"
> >>
> >> --------------
> >>
> >> The above can be used to reset regedit to default activities by
copying
> > the
> >> above to a TEXT editor, saving as a .reg, and merging, or by manual
> > editing.
> >> Manual editing should only be done by parties who understand a single
> > wrong
> >> entry may cause problems with their computer.
> >>
> >> --
> >> MEB http://peoplescounsel.orgfree.com
> >> --
> >> _________
> >>
> >>
> >>
> >
> >
>

MEB · Apr 13, 2008

MEB · Apr 13, 2008

Oops, forgot to add, that by using autoruns, you can selectively disable or
remove run services and other [far more than MSCONFIG shows], just be
careful what you disable or remove..

--
MEB http://peoplescounsel.orgfree.com
--
_________

Registry Write Protected

Warren

MEB

Warren

glee

Warren

MEB

MEB

Similar threads