Base System Object Restrictions Are Not Enabled by Default

ID: Q244995

The information in this article applies to:
  • Microsoft Windows NT Workstation version 4.0
  • Microsoft Windows NT Server version 4.0
  • Microsoft Windows NT Server, Enterprise Edition version 4.0
IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

SUMMARY

After you apply the latest Windows NT 4.0 service pack to your Windows NT-based computer, it is necessary to manually enable base system object restrictions to prevent unauthorized access to various system-level files. Access to these files may be used to circumvent some of the security functions of the operating system.


MORE INFORMATION

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).


To restrict changes to base system objects, use Registry Editor (Regedt32.exe) to locate the ProtectionMode value under the following registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager
Verify that a DWORD value with a value of 1 exists, and if it does not exist or has a value of 0, add it to this key, or edit the value to be 1.

Additional query words:

Keywords : ntdomain ntsecurity
Version : winnt:4.0
Platform : winnt
Issue type : kbinfo


Last Reviewed: November 5, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.