How to temporarily disable Ranger security for secure users.

Question

How do I temporarily stop Ranger security to allow access to RegEdit or other system tools for testing and debugging purposes?

Symptoms

N/A

Resolution

It may be necessary to temporarily disable Ranger Security to allow the registry to be checked or system programs to be run in order to trace a problem.

This process can only be performed by system administrators as access to secure Ranger Configuration files on the server is required.

Required actions:

Disable Ranger Security
Display the "Run" option on the Start Menu
Allow access to registry editor


Procedure:

Either from the server or on a workstation logged on as a "Manager" user,
start RangerAdmin.exe.

1. Select the appropriate group in the "Security" section. From the "Settings" tab, uncheck the "Apply Security" checkbox to disable Ranger security components.
   
2. Select the appropriate group in the "Ranger Profiles" section. From the "Policies" menu item, select Ranger's default policy and enable Registry editing tools by clearing the checkbox.
   
3. From the "Policies" menu item, select Ranger's default policy, "Windows Settings", "Start Menu" and enable the "RUN" command from the Start Menu" by clearing the checkbox.

Log on as a member of the appropriate group. Provided the group is configured to use the group shared Start Menus, you should see the Run item in the Start Menu and be able to run RegEdit and other normally banned applications.

When finished, ensure the above operations are reversed to restore normal security.