JSI Tip 4927. How do I prevent my Windows XP domain members from disabling or altering their System Restore settings?

To prevent Windows XP users from disabling or altering the System Restore settings on their computer, you need to to set the DisableConfig Value Name, a REG_DWORD data type, to 1, at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore.

The easiest way to do this without traveling is:

1. Create a DisableConfig.reg file in the NETLOGON share, containing:


\[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\]

2. Create a DisableConfig.bat file in the NETLOGON share, containing:

@echo off
if /i NOT "%OS%"=="Windows_NT" goto :EOF
for /f "Tokens=3" %%a in ('ver') do set XP=%%a
if "%XP%" NEQ "XP" goto :EOF
regedit /s %LOGONSERVER%\NETLOGON\DisableConfig.reg

3. Use Workstation.bat on your Windows 2000 or Windows XP workstation:

Workstation NetBIOS_Domain_Name Domain_Admin_Account Domain_Admin_Password WS %LOGONSERVER%\NETLOGON\DisableConfig.bat
NOTE: You must replicate or copy DisableConfig.reg and DisableConfig.bat to the NETLOGON share of every domain controller.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.