Win2k /system32 protection, how to disable it?

[superbaby]

I'm trying to replace notepad.exe (with my custom text editor), but notepad.exe is located in the /system32 directory in Win2k, and you can't delete/rename/replace anything in that directory, because it will restore the original.

Is there any way around this? I hate Windows notepad...

 

[Noriaki]

if it's on a FAT32 partition you could boot from a Win98se startup disk 😛

Seriously though I'd like to know this too...replacing notepad.exe is a favourite trick of mine...
notepad is seriously underpowerd and wordpad is just plain crappy 😛

 

[BudB]

I used to do this also. In W2K there are over fifty registry entries for notepad.exe. In addition, it appears in both the WinNT directory and the System32 directory. The notepad in W2K doesn't have the filesize limitations the previous notepad had but appears to be closely integrated with many things in W2K. You might be better off just looking for the "Open with" entries in the registry and replacing them with the editor of your choice. Or using the File Types tab of the Folder Options and setting the "opener" of your choice for the various file types there.

 

[superbaby]

I don't want work-arounds... waah!!! 🙂

I can't believe there's no way to make exceptions in the file protection system. There HAS to be!

 

[jaywallen]

Hi,

Well... Seems a shame to forsake Windows File Protection just to replace notepad.exe. But you can turn it off by using REGEDT32.EXE to edit this registry key:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

If there is no REG_DWORD entry called "SFCDisable", you'll need to create one. Its default value in Windows 2000 Pro is "0", but to totally disable file proctection you'll need to set it to a value of 0ffffff9d (hex). This is "undocumented", and Microsoft warns that it may be rescinded in SP2 or later.

It's obviously better to just manage to beat the file protection scheme on this one file. You could probably use an adaptation of the method for preventing hotfix replacement files from being "protected".

1. Open a CMD prompt FIRST!

2. Rename your NOTEPAD.EXE files contained in both functional locations (%SYSTEMROOT$ and %SYSTEMROOT%\SYSTEM32) to NOTEPAD.OLD.

3. Install your replacement executable, making sure you place the new NOTEPAD.EXE files in both functional locations (%SYSTEMROOT$ and %SYSTEMROOT%\SYSTEM32, and do NOT allow the system to reboot following installation.

4. CD into %SYSTEMROOT%\SYSTEM32\DLLCACHE, and rename the copy of NOTEPAD.EXE there to NOTEPAD.OLD.

4. Copy your new replacement NOTEPAD.EXE to the DLLCACHE directory.

5. Restart.

6. You'll probably get an error message about how files required for Windows to operate properly having been usurped by unrecognized versions and that you should stick your installation CD in the drive. If this comes up, it's because the database "knows" you're messing around. Just cancel it.

7. If you've had to cancel the process mentioned in step 6, then Windows will undoubtedly ask you if you're really, really, positively, absolutely sure you want to do this ill-advised and subversive thing. You answer "Yes", of course.

Please note: This is an adaptation of the process that's supposed to keep the file protection scheme from defeating certain types of hotfixes. I hope I've translated it properly. I would never try to deceive anyone. MUA-HA-HA-HA!

No, seriously, it shouldn't do any harm. And, since you've got all your old file copies, you should be able to restore things to the original configuration, if necessary.

At least notepad should be an easy application to replace. I'm not sure I'd want to get into large-scale file complement replacements with something like this. I cringe at defeating the WFP database for fear that it might get corrupted in the process, but I'm probably too paranoid in the rewrite. I used to replace notepad.exe, too, but I'm just using the "Send To" feature to open text files in my favorite editor in W2K.

Hope this helps.

Regards,
Jim

 

[Strafe]

Go to c:\winnt\driver cache\i386. Rename the 'driver.cab' file to something like 'driver.cat', then make the changes you want. Make sure you dont have your Windows install CD in your CD drive. Windows will not be able to find the file so it will have to prompt you and you can say 'screw you I want this file!'. Then of course make sure you rename the driver.cab file back.

 

[superbaby]

Nice it worked 🙂

However at first it didn't, then I looked in WINNT\dllcache and there was a notepad.exe there. I had to replace that one as well. Otherwise, thanks a lot!