Desabe Regedit Through Bigfix console

1

(imported topic written by sayyedyusuf91)

HI,

Any one Know how to disble Registry Editing tool in client machine Through big fix console

I have all ready try with windows Registry Wizards but its not working ??

i have try Below reg key useing spacify a registry Task but after deploy this task and chk in client machine it’s did’t work registry editing still work ???

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

“DisableRegistryTools”=dword:00000001

Can any one tell me Big fix script to disable registry edit in clint pc ???

also i have Vb Script but how can i use this script in bigfix console but i want minmum custom Task size in bigfix server ??

i want to use attached Vb script please reply ???

Regard

Yusuf

2

(imported comment written by JackCoates91)

Current User is LocalSystem. You need to run as the logged in user, or do it to HKU and relogin, or do it to HKLM and reboot (assuming this is post-XP).

3

(imported comment written by sayyedyusuf91)

Dear JAckCoates,

Thank U for giving reply I have checked with as per your instructions but still same issue after complete task and check client pc regedit still enable ?

Can u please send me bigfix script

4

(imported comment written by JackCoates91)

I did some experimentation with an XP system, so HKLM doesn’t apply. The registry setting does work immediately if you use HKCU, and this disable-regedit.bat batch file works on my system:

REGEDIT4 ; @ECHO OFF ; CLS ; REGEDIT.EXE /S 
"%~f0" ; EXIT [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] 
"DisableRegistryTools"=dword:00000001

To re-enable, use “DisableRegistryRools”=-

However, it doesn’t set the registry key when run through RunAsCurrentUser.exe. Here’s my script:

prefetch RunAsCurrentUser.exe sha1:9fd47b14aee681a6bad6579d30d6fb3fa4cc3ae3 size:131072 http:
//support.bigfix.com/download/bes/util/RunAsCurrentUser.exe createfile until __EOF REGEDIT4 ; @ECHO OFF ; CLS ; REGEDIT.EXE /S 
"%~f0" ; EXIT [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] 
"DisableRegistryTools"=dword:00000001 __EOF delete disable_regedit.bat move __createfile disable_regedit.bat wait __Download/RunAsCurrentUser.exe --w disable_regedit.bat

I suspect this is about current working directory but haven’t been able to find clarification one way or the other.

5

(imported comment written by BenKus)

Note that you can use the Windows Registy Wizard to generate this action for you…

Ben

6

(imported comment written by akies91)

Hi Ben,

I using Registry Wizard to disable Registry Tools for my client’s pc (XP).

The result is complete but nothing change on regedit.

Could you help me on this fixlet?

Thanks a lot

=======================================================

action uses wow64 redirection false

delete __appendfile

delete wizardedit.reg

appendfile Windows Registry Editor Version 5.00

appendfile

appendfile

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

appendfile “DisableRegistryTools”=dword:00000001

move __appendfile wizardedit.reg

waithidden regedit /s “wizardedit.reg”