1.

Solve : Windows Run Command box not working?

Answer»

Hello,

I'm running on an admin account in windows xp pro.
When I try to use key combo for accessing to windows Run Command box, I receive this message

"Restrictions:
This OPERATION has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."

If I open the Group Policy Editor and go check in User Configuration > Administration Templates > Start Menu and Task, all items there are "Not Configured" (same for the item called "Remove Run menu from Start Menu"). I also check for all the "NoRun" iterations in registry but am not seeing the culprit if it's there...

I did check the system's health with some tools (SpyBot-S&D, SUPERAntiSpyware, David H. Lipman's and AVZ Antiviral's Toolkit, and NOD32), but nothing obviously NEFARIOUS was found.

--
All advices very welcomeI have found the global policies to stick sometime. Or if you change one and than change it back to the Not Configured is still stays as configured. I also had the same THING happen with the regedit command.


Go in and change it to disabled.


Quote from: Spoiler on May 02, 2008, 08:21:24 AM

I have found the global policies to stick sometime. Or if you change one and than change it back to the Not Configured is still stays as configured. I also had the same thing happen with the regedit command.

Go in and change it to disabled.

Tried to mix and MESS within GPE, but no better go.

I also just run an HijackThis pass.
There only is a possibly weird reporting about "CTFMON.EXE" file (see http://support.microsoft.com/kb/282599):

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')


I don't have MS Office installed on this pc! And, strangely, this file is not seen by other tools like MS' AutoRun and A-square's HiJackFree...

--
Thanks for your reply, Spoiler.You know you have to reboot after making CHANGES to the GP. Right?

Quote from: Spoiler on May 02, 2008, 08:49:04 AM
You know you have to reboot after making changes to the GP. Right?

Yes.

Here's an idea of this area of my registry at HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer


ClearRecentDocsOnExit REG_DWORD 0x00000001 (1)
ForceStartMenuLogoff REG_DWORD 0x00000000 (0)
NoActiveDesktop REG_BINARY 01 00 00 00
NoActiveDesktopChanges REG_BINARY 01 00 00 00
NoComputersNearMe REG_BINARY 01 00 00 00
NoDriveAutoRun REG_DWORD 0x03fffffb (67108859)
NoDrives REG_BINARY 00 00 00 00
NoDriveTypeAutoRun REG_DWORD 0x000000f5 (245)
NoFavoritesMenu REG_DWORD 0x00000000 (0)
NoInstrumentation REG_DWORD 0x00000001 (1)
NoInternetOpenWith REG_DWORD 0x00000001 (1)
NoLowDiskSpaceChecks REG_DWORD 0x00000001 (1)
NoRecentDocsHistory REG_DWORD 0x00000001 (1)
NoRecentDocsMenu REG_DWORD 0x00000001 (1)
NoRecentDocsNetHood REG_DWORD 0x00000001 (1)
NoRun REG_DWORD 0x00000000 (0)
NoSharedDocuments REG_BINARY 01 00 00 00
NoSMHelp REG_DWORD 0x00000000 (0)
NoSMMyDocs REG_DWORD 0x00000001 (1)
NoSMMyPictures REG_DWORD 0x00000001 (1)
NoStartMenuMyMusic REG_DWORD 0x00000001 (1)
NoStartMenuPinnedList REG_DWORD 0x00000001 (1)
NoUserNameInStartMenu REG_DWORD 0x00000001 (1)
NoWindowsUpdate REG_DWORD 0x00000000 (0)
-- SOLVED

I had to change back "NoRun" value from 1 to 0 in those 2 two keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer

I don't know how and when they build there first, but I will keep an eye on for any possible malware at work. Thanks for your try at helping me.


Discussion

No Comment Found

Related InterviewSolutions