Windows 2000::Disabling Windows File Protection

The value of 4 below sounds promising. This could make the BAT file approach work.
Change the value data for the SFCDisable (REG_DWORD) value to 1 in the
registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

NOTE: For the change to this value to become effective you must restart the
computer. Also, if you are disabling WFP, a kernel debugger must be
connected to
the computer.

Following is a complete list of values for SFCDisable:
- 0 = enabled (default)
- 1 = disabled, prompt at restart to re-enable
- 2 = disabled at next restart only, no prompt to re-enable
- 4 = enabled, with popups disabled

The problem is the restart thing - this complicates the implementation since we have to know the workstation has restarted since the registry change was merged.

No comments: