My system restore in Windows XP Home Edition is disabled by Group Policy. The system doesn't allow me to enalbe this function, despite I have a partition in my Hard Drive to just store backup

When I open the system properties dialog box, System Restore is checked off, saying it is disabled by Group Policy, and the system doesn't allow you to enable this option. I got a dedicated partition in my Hard Disk justo to store Backups and create Restore Points with 10 GB capacity. How can I fix this problem?
Answer
Answer
If you are seeing things like this:

You do not have sufficient security privileges to restore your system.
The System Restore tab is missing from My Computer Properties.
System Restore has been turned off by group policy.  To turn on System Restore, contact your domain Administrator.
The System Restore tab is available, but the Turn off System Restore (disabled by Group Policy) box is greyed out.
Task Manager has been disabled by your System Administrator.
Registry Editor has been disabled by your System Administrator.
Task Manager has been disabled by Group Policy.
Registry Editor has been disabled by Group Policy.
The command prompt has been disabled by your administrator.  Press any key to continue...
The operation has been cancelled due to restrictions in effect on this computer.  Please contact your system administrator.
The "Run" option is missing from the Start menu.
The "Log Off..." option is missing from the Start Menu.


The usual advice is something along the lines of "something has been disabled in Group Policy...", and that is probably true that something has been disabled, but you need to know what that something is and what to do about it.

If you are using XP Home, you will not get far with advice to use the Group Policy Editor since there is no Group Policy Editor in XP Home and that really doesn't tell you where to look in the Group Policies even if you could run Group Policy Editor.

You need a comprehensive solution that will work for all versions of XP and do not require hunting around in the Group Policy Editor or the registry to find where things are that might have been disabled.

Unless you disabled these things on purpose, the chances are good that your system has a malicious software infection.  The malware knows what tools you are going to use to try and find and remove it, so the malware disables the things you are most likely to use and keeps them from running so you can't find the malicious software and remove it.

If your system has this kind of affliction, whatever malicious software tools you are currently using or have been using have failed to protect your system so you may want to expand your malicious software prevention and detection horizons to prevent these kinds of afflictions in the first place.

The malicious software will be happiest to fool you into thinking you need to so something drastic to fix your system - like a Repair Install, System Restore point, or a total reinstallation of XP.  That is what it would like you to do, but such measures are not required.

You need to fix the immediate problem of the tools not working, then scan your system for malicious software when you are done.

No matter what kind of malicious software scanning tools you have already used, they are unlikely to fix this problem because they cannot tell if the changes to your system were on purpose (you or an Administrator made them) or some malicious software changed them, so the scanning tools will leave these things alone (this is usually a good thing).

If your system is afflicted in this manner, there are probably other things that also don't work - like Task Manager, Registry Editor, System Restore and Command Prompt, so fix them all at once even if you haven't found out they are broken yet.

These registry commands will remove the registry entries that are stopping the programs from opening.  Even if the registry entries are not there, these commands are safe to run and will work for all versions of XP.

Before making any changes to your registry, back up the registry with this popular free tool:

http://www.snapfiles.com/get/erunt.html

Open notepad to create a new text file:

Click Start, Run and in the box enter:

notepad

Click OK to open a new notepad file.

Copy and paste the following lines of text into the new notepad file.


Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableRegistryTools"=-
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
"DisableCMD"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=-
[HKEY_USERS\.default\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=dword:00000000
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore]
"DisableConfig"=-
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore]
"DisableSR"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoRun"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoRun"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoClose"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoClose"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSetTaskbar"=-


Save the new text file with a .reg extension to your desktop or someplace you can remember with a name you can remember, something like:

enableit.reg

After saving the file, close notepad.

Locate the enableit.reg file on your desktop and double click it.

Alternatively, you can right click the enableit.reg file, choose Open With... and select the Registry Editor.

Respond in the affirmative to the question... Are you sure you want to add the information to the registry?

You should then see a message that the information was successfully entered into the registry.

Reboot your system and test.

You can remove the enableit.reg file when you are done.

If the Registry Editor has also been disabled, we will have to fix that first (not a problem).

Since your system has or has had an infection, follow up with this:

Perform some scans for malicious software, then fix any remaining issues:

Download, install, update and do a full scan with these free malware detection programs:

Malwarebytes (MBAM):  http://malwarebytes.org/
SUPERAntiSpyware: (SAS):  http://www.superantispyware.com/

They can be uninstalled later if desired.

For the benefit of Microsoft Support Engineers, here are some of your ideas offered in the past that will NOT help with this issue:

Booting in Safe Mode
Booting into Last Known Good Configuration
A Clean Boot
Running sfc /scannow (or trying to run it)

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated March 14, 2020 Views 1,980 Applies to: