Avatar of gmbrammer
gmbrammer
 asked on

Windows XP Group Policy is blocking everything

Once I login, any icon I click on pops up a "Restrictions" error window containing this message:

"This operation has been cancelled due to restrictions in effect on this computer.  Please contact your system administrator."

I was adding a group policy to stop execution of certain applications and must have accidentally done something that blocks everything.  I tried Safe Mode and there was no difference.   I can access the control panel but none of the icons will execute.  None of the administrative functions can be run (regedit, poledit.msc, etc).  I tried loading a previous snapshot of the registry and it did not fix the problem.

How can I either edit the group policies and undo whatever I did or put them back into an "empty" state?
Windows XP

Avatar of undefined
Last Comment
Ackles

8/22/2022 - Mon
JonathanHemmings

System restore?
Ackles

Put your XP in a new OU, Block inheritance on that OU & reboot , but make sure nothing is Enforced above that.

A
Ackles

If there is something Enforced, then go to that policy & depending upon computer or user policy, go to Delegation & deny AGP to computer or user.

A
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
mayureshtodankar

If you are able to start Command Prompt. Run following commands

reg delete HKEY_CURRENT_USER\Software\Policies /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies /f

then you should be able to start any application.
Ackles

He can't run regedit
gmbrammer

ASKER
I can boot on theUBCD4WIN CD to bring up XP and then edit the registry on the C: drive and access any files.  I am able to run taskmanager, and when I click on an icon, explorer.exe and winlogon.exe run for just a moment.

I deleted both policy entries in the registry, but I still cannot run any applications or administrative programs.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Ackles

Did you try the OU method?
Ackles

If you really want to go Nuclear, then disjoin the computer from Domain & login as local admin, however try what I suggested above.

A
gmbrammer

ASKER
This is a standalone PC and does not connect to a domain.  I checked the registry using the UBCD4WIN and there were no OU's to which to move the PC and no group policy editor to create an OU.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
Ackles

Do you have a computer which is standalone itself & is working without these problems?
gmbrammer

ASKER
Yes several
ASKER CERTIFIED SOLUTION
Ackles

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Ackles

or if you want, as you mentioned you could boot from CD & access the command prompt:

http://escapelogic.com/main/node/2

Whatever you want.

But, copying is pretty straight forward & easy.

A
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
gmbrammer

ASKER
Thanks for the help!
Ackles

Glad to be of help.

A