"Registry editing is prohibited" - what to do? What to do if editing the registry is prohibited by the administrator Windows 10 does not allow the administrator to edit the registry

Every day viruses become more sophisticated and smarter. Modern viruses are increasingly starting to use the built-in functions of Windows, which ordinary users do not even know about. If you see an inscription on the screen: , this indicates either that your system is infected with a virus, or you work in a harsh organization with the right system administrator.

Below I will describe how you can open the Windows system registry for editing and get rid of the bounding box: registry editing is prohibited by the system administrator.

First you need to clean up and clean out all the garbage. This can be done with an antivirus, which acts as a mini vacuum cleaner, which allows you to get into all the hidden corners of your "home", where you can't get through with a normal look.

On a home computer, such a window occurs more often as a result of infection with a virus that blocks editing the Windows system registry.

Enable editing the Windows registry:

1. Create a file register_on.bat. The file must have the extension bat, as this tells the OS that the file is executable.
2. Open the file for editing and add the code:

   REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /f

   Save and close.

3. We run this BAT file on the experimental computer and rejoice that we have shown who is in charge.

If you are too lazy to create a file yourself, then I suggest downloading the finished one

To disable editing the Windows registry:

1. Create a file register_off.reg. The file in this case must be with the extension exactly REG, this tells the OS that the file will make changes to the Windows system registry.
2. Open the file for editing and write:

If when trying to run Registry Editor(in any way: Start – > Execute... – > regedit – >OK, or \WINDOWS\regedit.exe, or by running reg-files) window appears "Registry Editor" with a message "Editing the registry is prohibited by the system administrator", what does this mean?

Usually unable to start Registry Editor talking about possible virus infection of the system. The fact is that viruses are "prescribed" in Windows Registry(while in the section parameter is created REG_DWORD DisableRegistryTools with meaning 1 ). And so that they (viruses) cannot be uprooted from the system, they make it impossible to start Windows Registry Editor.

***

How to make launch available Registry Editor

Even after removing the virus that prevented the launch Registry Editor, it cannot be started.

To make it available again, click Start – > Run… – > in the field Open: enter gpedit.msc – >OK – > Group Policy – > Policy "Local Computer" – > User configuration – > Administrative Templates – > System – > on the right side of the window System by double clicking the left button by line (State – Not set) call window Properties: Disable Registry Editing Tools –> installed switch Switched on –> put Disabled(or Not set) –> Apply – >OK.

Close the window Group Policy. For changes to take effect without rebootingMinimize all open windows (by pressing the button on the panel Quick Start, or by pressing the keyboard shortcut – logo keys Windows+D), press the key F5(or right-click on an icon-free surface desktop, in the opened press Refresh).

Notes

1. Group Policy Disable Registry Editing Tools disables the use Registry Editor (regedit.exe). If this policy is enabled and tries to run Registry Editor, a message will be displayed stating that the current policy prohibits this action.

2. Can be made available launch Windows Registry Editor by running an alternate Registry Editor(for example, by booting from a rescue disk such as ERD Commander), in section find the parameter REG_DWORD DisableRegistryTools and set its value 0 (or completely remove this option).

Attention! When working with Windows Registry Editor you should be careful, otherwise you can edit such that you have to reinstall the operating system! ..

3. When working on the corporate LAN shutdown Registry Editor often done by the administrator – to protect against destructive actions with playful handles! – that's why he! ..

4. To Registry Editor could start in Register in section parameter value should be - regedit.exe "%1"

Any user of a modern computer system eventually comes to understand how the Windows operating system works. Sooner or later it will happen. It is possible to personalize settings or fix many problems by changing the parameters of keys and entries in the system registry. But what if suddenly the user, say, with the "seven" installed, receives a message stating that editing the registry is prohibited by the administrator of the Windows 7 system? Let's look at most situations and the reasons that lead to them.

How to understand that editing the registry is prohibited by the system administrator

First of all, any user, regardless of the level of training, should be aware that the Windows Registry Editor works a little differently than other applications.

The simplest example: when changes are made, any other program prompts the user to save them. But only not If something is changed, even a normal exit from the program leads to automatic saving of changes.

But the appearance of a warning like "Registry editing is prohibited by the system administrator" (Win 7, 8, 10 or the clearly outdated OS XP) can be due to many reasons. Moreover, this may not always be due even to the lack of administrative access rights to the computer terminal and the main or hidden functions of the operating systems themselves.

Reasons for such situations

Let's assume that the terminal has Windows XP installed, which allows several authorized users to work on one computer under their own accounts. It goes without saying that in addition to them, there is also a computer administrator, whose "account" allows you to change absolutely all system parameters.

It is clear that the administrator can impose some restrictions on users' access to certain functions, so that, say, due to their inexperience, God forbid, they do not make any critical changes to their own settings. In principle, this may not affect the performance when logging in as an administrator, but user settings can simply “fly off”, and it’s completely elementary. That is why the administrator blocks access to these functions, as a result of which the user is faced with the problem that editing the registry is prohibited by the administrator of the Windows XP system. By the way, this applies equally to all modifications of Windows.

Almost the same prohibition can also occur when several computer terminals are connected to a local network. As you know, managing the health and configuration of such networks is entrusted to system administrators. And it is they who set the settings in such a way that users of local machines cannot get not only to change the default settings set by the system administrator, but also to critical changes in the same system registry. That's why instead of a message, say, in a regular "express", the user, when trying to access the registry editor with the introduction of the regedit command in the "Run" menu or in the command line itself (cmd call command), receives a system response in the form that editing the registry prohibited by the administrator of the XP system, but that blocking access is carried out at the level of the system administrator responsible for the performance of the "local".

But there are other situations as well. Imagine the simplest option: the user works in the installed system himself, there are no other users registered on the “computer”, that is, he is his own administrator. And suddenly, for no apparent reason, he receives a message that editing the registry is prohibited by the system administrator? How so? He's also the administrator! What is it connected with? First of all, with the manifestation of the activity of virus programs, less often - with the installation of any specific applications.

What if it's a virus?

Indeed, modern viruses and the people who create them today have come to understand the essence of how the Windows OS works. Some of these applications are able to block access to Windows system functions.

Some virus developers do this because there is nothing to do, some just for the sake of interest in order to check the system for vulnerabilities, and at the same time their own abilities, some just try to get into someone else's computer and make their own changes. The point is not that.

Again, with such unauthorized exposure, a problem may arise due to the fact that a notification appears on the screen about the current restrictions, in particular, that editing the registry is prohibited by the system administrator.

There is only one way out - an immediate check of the system with installed standard, or better, utilities like Rescue Disc, which allow you to perform an in-depth scan of your computer for viruses even before the "OS" itself boots from the hard drive. Such utilities are launched either from optical or USB media ... Naturally, in the BIOS settings they will need to be specified as the first priority device for launching (call with the Del, F12, F2 keys, etc. - it all depends on the brand of computer or laptop , as well as from the BIOS developer himself).

Registry editing is prohibited by the system administrator: what to do

Now we, in fact, are approaching the question of finding solutions and correcting such situations. In principle, quite a lot of solutions to this problem are offered today: from native Windows tools to the use of third-party utilities. Now we will focus on the simplest ways to troubleshoot problems, for example, in the same “seven”, related to the fact that editing the registry is prohibited by the administrator of the Windows 7 system (today this OS is the most common and in demand by most users).

Using the Group Policy Client

If anyone does not know, some registry entries responsible for accessing system functions are duplicated in the same “seven” by the local and group policy client service. As a rule, system administrators do not block it, believing that the user does not know how to get to it. Let's make a reservation right away: if the client is blocked, this method will not work.

However, if the user receives a message that editing the registry is prohibited by the system administrator, you can call the command line or the Run menu and enter gpedit.msc in the corresponding field.

Next, you should find the settings branch, in which on the right there will be a line forbidding access to registry editing access tools. Here you need to select the submenu called by the right click, and use the command to change the settings, after which, in fact, put a “bird” in front of the disable option, and then save the changes.

Using Symantec Tools

The well-known Symantec Corporation, which once stood at the origins of computer security, offers its solution.

On the official resource, you just need to find and download to your computer a small file called UnHookExec.inf, which, after launch, is able to remove all restrictions on access to the Windows system registry editor. Its launch involves the use of a right click, after which the installation command is selected from the menu (by the way, some drivers are installed manually in the same way).

Command line

An equally effective way when receiving a message that editing the registry is prohibited by the system administrator is to use it, however, in a somewhat specific way.

First, in a console that looks like a DOS system, you need to enter the line shown in the illustration and press the enter key (Enter). The registry will be unlocked.

If this is not enough, so as not to enter the command all the time, you can simply copy this code into a standard Notepad, and then save the contents as an executable file with the .bat extension. In Windows XP, for example, a double-click will be enough to launch the element; in versions of Vista and higher, you need to run the file with a right-click as an administrator.

Conclusion

Actually, this consideration of the problem can be completed. Of course, here are only the most common causes of its occurrence and the most popular ways to eliminate it. For example, we did not consider the question of how to log into the system as an administrator in the same "expiry", although this is done at the level of any user is absolutely elementary. But for most cases, it is recommended to use either (if it is not blocked) or download and run the file from Symantec. The second option is much easier.

The Registry Editor is a useful utility that allows you to change advanced Windows settings, but sometimes when you try, 8, we see the error "". It is called as a result of virus software attacks or a ban by the system administrator.

Before doing this guide, scan your PC for viruses. Sign in as an administrator to follow the instructions below.

Enabling the Registry through the Group Policy Editor

Note: Computers running Windows 7 Home and Starter Editions 8 do not have access to Group Policy (gpedit.msc). If you are using OS data, skip this method and proceed to the next one.

To enable the registry editor on Windows 7, 8, do the following combination of steps:

1. Create a new text document (.txt), name it and open it.

2. Copy the lines below into it and save:

REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /t REG_DWORD /v DisableRegistryTools /f /d 0

3. to the extension (.bat).

4. Right-click on the batch file and run as administrator. CMD will flash for a second and then disappear. This indicates successful execution.

5. Log out and log back in.

That's all, one of the ways will contribute to the disappearance of the message " registry editing is prohibited by the system administrator and restore the full functionality of Windows. If your OS allows you to use Group Policy, use it first. Otherwise, try one of the other methods to enable Regedit.

I welcome you to my blog!
“Registry editing is prohibited by the system administrator”, you will see such an inscription when you try to open the registry editor if entering it is prohibited.
This can happen due to the action of a virus or at the request of your network administrator.

If entering the registry editor closed the virus, then before opening access to it, you must first remove the virus and clean the system.
And if the network or computer administrator closed the entrance to the editor, for example, so that inexperienced users do not spoil the system, then first think about whether you should open access to it.

In this article, I will tell you how to disable access to the editor, if you need to restrict other users' access to it, and how to unlock the registry editor if the villains have closed access to it.

In principle, you can disable and unlock the registry editor in one program, so it makes no sense to write about it in different articles.

You can disable and allow editing the registry in several ways, here are just a few of them.

How to disable registry editing.

To disable access to the registry editor, run the regedit program.
To do this, press the combination Win + R

And enter the command: regedit

Disables editing the registry with the DisableRegistryTools parameter, which is located along the path:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

If it has a value of 1, then logging into the registry editor will be prohibited.
If it has a value of 0 or there is no such parameter at all, then the entrance to the editor will be opened.

If you already have such a setting, then set it to 1 and close the registry. You will not open it again until you allow access to it.

If you do not have the DisableRegistryTools parameter in the System section, then create it.

In general, if you have never denied access to either the registry editor or the task manager, then you may not even have a System partition. So, if there is no System section in the Policies section, feel free to create it.

Then create a Dword parameter called DisableRegistryTools.

Assign it a value of 1

That's it, you have forbidden editing the registry.

You can also disable editing the registry using the Local Group Policy Editor utility. With this editor, you can also allow editing the registry. The disadvantage of this method is the absence of this editor in the initial versions of Windows.

To launch the Local Group Policy Editor, press Win+R and enter the command: gpedit.msc

Then follow the path:

User Configuration - Administrative Templates - System - Deny Access to Registry Editing Tools

If you want to disable access to the registry editor, then check the “Enable” box.
If your registry editor is already blocked, then in order to unblock it, check the “Not configured” or “Disable” item.

How to unlock the registry editor.

In order to unlock access to the Windows registry, you can use many programs. Alternatively, you can boot from a LiveCD boot disk and remove all restrictions by going to the remote registry editor.

I suggest using the AVZ program, you can download it either from the author's site or from my site. All links. This program must be in the arsenal of every computer user.

Run the program and follow the path: "File - System Restore".

Then check the box for item number 17 - “Unlock the registry editor”.
After that, access to the registry will be opened.

The next way to open access to the registry editor is to change the registry through the command line.
Press Win + R and enter the command: cmd

In the window that opens, type the command:

REG DELETE HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools

I couldn’t unlock the registry with this command in Windows 7, even though I ran the command line as an administrator, though not. But it's worth a try, maybe you'll have better luck.

But in Windows XP everything went just fine and access to the registry was open.

As you can see, there are a lot of ways to prohibit and allow editing the registry, so some one will definitely help you.
To keep your system on alert, sometimes you need to clean the registry, you will learn how to do this by reading this.
Good luck!