Uh oh... Locked myself out with SRP!

While implementing SRP via the registry on Windows 7 Home Premium, I accidentally locked myself out by enforcing it for local administrators. Now I cannot execute anything as admin - not Regedit, not cmd, not System Restore, nothing. Pretty powerful, that.

What are my options, short of restoring from backup?

 

The easiest way to fix Windows is usually to boot Linux. =p Mount the drive and change the configs manually I'd think.

 

Hmm, how would I edit the registry from Linux? Wine's "regedit" can't import registry hives IIRC.

Edit: Perhaps I could use a BartPE CD? Is WinXP's regedit compatible with Windows 7's registry?

(Alas, I would have to make a BartPE CD, as I don't even have one on hand right now. Bah.)

 

Can you create a batch file to import what you need to reverse the key?

Perhaps something like Ultimate BootCD may be of help.

 

Don't think so. Can't run anything whatsoever as admin, as far as I can tell, nor can I log in as my local admin. To add insult to injury, the default settings block batch files.

Edit: UBCD4Win is probably my best bet, but I'd have to create one. Ah well. I was hoping there'd be a better way.

(Though in retrospect I should not be surprised. MS was clearly not kidding around when they implemented SRP.)

 

Usually you can run batch files without admin privileges. The files just need to be local for example using a batch file to install an .msi package.

 

Yeah, but the registry values that need to be edited are locked down to administrators.

 

Try ultimate boot cd. I believe it has a registry editor from the disc or usb drive if you can boot from them.

 

You should be able to start the computer in safe mode, then log on as local administrator and change the software restriction policies from there. As far as I was aware, SRPs aren't active in safe mode.

 

Thank you, Safe Mode worked! However, the requisite PolicyScope DWORD value was already set to 1, as it was supposed to be. It looks like the value is being entirely ignored... Any idea why that might be?

 

Okay, SOLVED. Problem was TransparentEnabled being set to 2, to enable DLL filtering. Apparently this is much more involved, so I'm leaving it turned off for now... Maybe later, once I figure it out.

Meanwhile, I seem to have accidentally totaled my original administrator account - for some reason it can no longer log in at all outside of Safe Mode, though I can run stuff as admin fine from my limited account. No idea what happened there. No biggie though, I'll just create another.

Edit: Aaaand we are fixed. Still clueless re what happened to the old administrator account, but everything now works fine.

 

Glad everything turned out OK.

 

Do yourself a favor and make a system backup before you go much farther.

 

I LOL'ed.
I have never locked out myself with SRP but i did turned my PC into a pile of useless hardware once when i was messing the user privileges. (Folder Properties)