Cracking the xp group strategy lock problem

planning task method, security mode method To ensure the security of Windows XP system, many friends have set the group policy "on the public computer", only run the licensed Windows application & rdquo; In order to prevent the damage of the external program to the system. Inadvertently or in order to prevent others from modifying the group policy, some friends simply excluded the file from being allowed to run the program, and the system was locked, resulting in the inability to run all the programs. re-install system. In fact, there are reasons for this, and there are still solutions to this problem. 1. Plan task method Open “ control panel & rdquo; & rarquo; & ldquo; task plan & rdquo;, start the wizard to create a mission plan called MMC, the program is executed "C: \\ Windows \\ System32 \\ mmc.exe " rdquo;. When finished, right-click on the newly created MMC in the task plan window and select “Run”. In the open console window, click on the menu bar “File”→“Open”, navigate to “C :\\Windows\\System32\\gpedit.msc” program, open the Group Policy Edit window, expand “Local Computer Policy"→“User Configuration”→“Administrative Template”→“System” Double-click the "Run only licensed Windows application" in the right pane, and set it to "ld unconfigured" in the pop-up window. Click “OK" to exit and close the Group Policy Edit window. When the system pops up, “Save the changes to the gpedit.msc” query window, click “Yes” to confirm the save, you can unlock. 2. Safe Mode Method In fact, this limitation of Group Policy is achieved by loading the registry specific key value, which is not loaded in safe mode. Press and hold the F8 key after rebooting, in the open multiple boot menu window, select “Safe Mode with Command Prompt”. After entering the desktop, type “"C:\\Windows\\System32\\mmc.exe” at the command prompt of the startup, start the console, and then release the restriction according to the above operation. Finally, restart the normal login system to unlock. In addition, many of the restrictions of Group Policy cannot be effective in Safe Mode. If you encounter a restriction that cannot be lifted, you may want to go to find a solution. Renaming the procedural method, renaming the procedural method 3. Renaming the procedural method setting "Only running the licensed Windows application" strategy, you need to add the allowed program to the list, if you remember the name of the license running program that was originally set, And in the allow list to add any type of file .com, .bat, .exe, for example, only allow “qq.exe” run, then you can open the folder "C:\\Windows\\System32" Rename the mmc.exe program to qq.exe and run it. Similarly, if you want to keep the limit, you can rename the program you need to run to qq.exe, but others can only run QQ when using the computer. If the list of allowed programs is included with regedit.exe, open the registry, expand the "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\WindowsNT\\CurrentVersion\\Winlogon" branch, and double-click the Userinit subkey in the right window. In the window that opens, change its value to "C:\\Windows\\System32\\userinit.exe,mmc.exe" to enable mmc.exe to boot. After this modification and restart, the console will be automatically run the next time you turn it on, to open the Group Policy Editor to unlock it. 4. Rename the program method This setting of Group Policy can only prevent users from starting the program from Windows Explorer. In fact, many programs in the system can run independently. If you load the desktop process, system service, system screen saver, etc., it is not blocked, so just replace mmc.exe with the above file. To replace the screen saver logon.scr as an example, first open the folder "C:\\Windows\\System32\\dllcache", find the logon.scr file and copy it to the D:\\ drive, then at “C:\\windows\\ System32\\dllcache” delete this screen saver file in the folder to prevent the system's file protection function from preventing us from changing and deleting the system file. At this time, the system will pop up. The system file has been changed to an unrecognized version. Please insert the WinXP SP2 CD to repair it. ”'s inquiry window, click “ Cancel & rdquo;. Then open the folder "C:\\Windows\\System32", find the logon.scr file to delete it, and rename mmc.exe to logon.scr. Go back to the desktop, right-click in the space to select "Properties", in the pop-up window, click the "Screen Saver" tab, then select "ldquo;logon" in the screen save list, click “Preview&rdquo ; At this time, although the system will prompt to find the selected file, but in the background, the console program "mmc.exe" is started, and the restriction can be set. Note that after completing the operation, it is best to copy the d:\\logon.scr file back to the original folder. 5. Combination key activation method Although all the programs in the system are locked, pressing the Ctrl+Alt+Del combination key can start the task manager. Since the combination key can be used to start the taskmgr.exe program. Then just use mmcexe to replace taskmgr.exe, you can start Group Policy to unlock. Same as above, first enter the "C:\\Windows\\System32\\dllcache" folder, find the taskmgr.exe program and rename it to taskmgr1.exe, then enter the folder "C:\\Windows\\System32", find and will taskmgr Rename the .exe file to taskmgr1.exe. Now rename the mmc.exe file to taskmgr.exe, then press Ctrl+Alt+Del and you will see that the console program is started. After setting up the group policy, you can restore the task manager back to the original name.