I support workstation computers not connected to a domain. They run Windows 2000 and I utilize the restrictrun registry feature to restrict the user to running only programs I specify in the restrictrun list. The problem is when the user logs on, a restrictrun message appears. EventViewer doesn't show anything and I already crosschecked the startup items and Run items with the restrictrun list, but the restrictions message keeps appearing when an end user logs on. How do I figure out what program is trying to run that generates this restrictrun message? MB

"when an end user logs on" look at the logon script and see what it is running. create a test use with no logon script and see if you get the message. if not add one line at a time from the logon script to the test user logon script to see what is causing the popup. Imagine the power if you knew how to internet search

I checked the script on my test machine and all it has is a custom restrictrun.bat file, which during windows boot, it will set the restrictrun list in the registry. I had already crosschecked all the restrictrun list items with everything in the user start folder, the registry user and local machine run folder (and runonce folder too). There isn't anything I can see that would cause the Restrictions message. I'll check a live machine's startup script.

I went out to a live store machine and first verified that they have this restrictions issue. When they log into windows, a restrictions message appears, prompting to click ok. I checked their login script and removed some old junk. When I logged the user out and then back in, the popup message was gone. I rebooted the PC just so I don't get high hopes too quickly. NO MESSAGE!! Thank you! Wanderer because I haven't thought about the actual startup script before! I was only checking the run and startup folders.

Glad you found it. Hey more brains is always better than one which is why we are all here. Have a great day! Imagine the power if you knew how to internet search