Cracking the locking problem of Windows XP group policies

To ensure the security of Windows XP, many friends set the Group Policy "run only licensed Windows Applications" on the public computer to prevent external programs from damaging the system. To prevent others from modifying the Group Policy, some friends simply connect to "gpedit. msc files are also excluded from allowing the running of programs. As a result, the system is locked and all programs cannot be run. In desperation, You have to reinstall the system. In fact, there are some causes and solutions to this problem.

1. Scheduler

Open "Control Panel"> "Task Plan", start the Wizard to create a Task Plan named MMC, and run the program "C: WindowsSystem32mmc.exe ". After completion, right-click the newly created MMC in the task plan window and select "run". In the open console program window, click "file"> "open" in the menu bar and locate "C: windowsSystem32gpedit. msc program, open the Group Policy editing window, expand "Local Computer Policy"> "user configuration"> "management template"> "system ", double-click "run only licensed Windows Applications" in the right pane and set it to "not configured" in the pop-up window ". Click OK to exit and close the Group Policy editing window. When the system displays the "whether to save changes to gpedit. msc" dialog box, click yes to save the changes.

2. Security Mode

In fact, the restriction of the group policy is implemented by loading the specific key value of the registry, but this restriction is not loaded in security mode. Press the F8 key after restarting the system. In the multi-boot menu window that appears, select "safe mode with command prompt ". After entering the desktop, enter "C: WindowsSystem32mmc.exe" at the startup command prompt, start the console, then follow the above steps to unbind the restriction, and restart the system to unlock. In addition, many group policy restrictions cannot take effect in security mode. If you encounter a restriction that cannot be lifted, you may wish to find a solution.

3. Rename procedural law

Then you can open the "C: windowssystem32.pdf file folder, rename the mmc.exeprogram as qq.exe, and then run it. In the same way, if you want to keep the limit, you can change the runtime program name to qq.exe to run, but others can only run QQ when using the computer. If the allowed program contains regedit.exe, you can open the registry, expand the "HKEY_LOCAL _ MACHINESOFTWAREMicrosoft WindowsNTCurrentVersionWinlogon" branch, and double-click the Userinit sub-key in the right window. In the displayed window, change the value to "C: windowssystem32userinit.exe,mmc.exe}to enable mmc.exe to start up. After this modification and restart, the console will be automatically run the next time you start the system, to open the Group Policy Editor and unlock it.

4. renaming procedure Law

This setting of group policy can only prevent users from starting programs from Windows resource manager. In fact, many programs in the system can run independently. If you are on the go-to-machine desktop, the system service, the screen protection system, and other functions are not blocked, you only need to replace mmc.exe with the above file. To replace Screen Saver logon. scr is used as an example. First open the "C: WindowsSystem32dllcache" folder and find logon. copy the scr file to the D: disk, and delete the screensaver file in the "C: windowsSystem32dllcache" folder to prevent the system file protection function from preventing us from modifying and deleting system files, at this time, the system will pop up the "system file has been changed to an unrecognized version, please insert WinXP SP2 disc Repair" dialog box, click "cancel ". Open the "C: windowssystem32133" folder, find the logon.scrfile, delete it, and rename mmc.exe to logon. scr.

To remove the restriction. Note that after the operation is completed, it is best to copy the d: logon. scr file back to the original folder.

5. key combination startup Method

Although all programs in the system are locked, you can press Ctrl + Alt + Del to start the task manager. The combination of keys can be used to start the taskmgr.exe program. You can use mmcexeto replace taskmgr.exe to start the Group Policy and unlock it. The same as above. First, go to the "C: Windows system32dllcache.pdf" folder, find taskmgr.exeprogram, rename it taskmgr1.exe, and then enter "C: Example. Now, rename the mmc.exefile taskmgr.exe. Press Ctrl + Alt + Del to start the console program. After setting the Group Policy, restore the task manager to the original name.