Re: Modify GPO



"I do not have access to the domain controller"
---------------
Don't use registry 'binary' inserts.
-----------------
Which is the most likely next affair of discussion,
should it fail to succeed across versions.
------------------
If this were the intend of the vendor,
he should be punished - again..









<chris.harrod@xxxxxxxxx> wrote in message
news:1169056645.328073.156410@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I do not have access to the domain controller but I'm trying to modify
the GPO or assign a logoff script to all clients on my network.

I attempted to do this through the registry (assign a logoff script)
but was roadblocked when I found out I couldn't enter a QWORD value.
Apparently the function SetQWORDValue is built into WMI but it doesn't
work unless you're using Vista. So my ugly GPO registry hack won't
work. I know it's an ugly hack, but that's okay =]

const HKEY_CURRENT_USER = &H80000001
Set StdOut = WScript.StdOut
Set objReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &
strComputer & "\root\default:StdRegProv")
strKeyPath =
"SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Logoff\1\1"
objReg.CreateKey HKEY_CURRENT_USER,strKeyPath

strValueName = "ExecTime"
strValue = "hex(b):00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00"
objReg.SetQWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName,strValue

A also can't modify the machines' GPO through WSH/WMI to my knowledge.

Does anyone have a direction to point me in?


.



Relevant Pages

  • Re: Apply registry setting.
    ... Where exactly can I get the registry Client Side Extension. ... What I want to do is create a GPO to remove ... > ways to manage registry setting via Group Policy and they will almost ...
    (microsoft.public.win2000.group_policy)
  • Re: Time GPO for Clients
    ... First let me tel you that in previous post when editing the registry I was ... not make it into the registry even though the GPO is properly configured. ... in the Windows Time Service settings, ... I tested the policy I created with a Domain Admin login and the settings ...
    (microsoft.public.windows.server.active_directory)
  • RE: Windows 2kserver with XP clients - Policies
    ... you mean that you want to control specific XP settings ... Another thing you can do is to import .ADM templates from a Windows ... On a XP machine install a registry monitor tool which monitors the ... if you want to have a gPO setting that disables the ...
    (Security-Basics)
  • Re: Security
    ... If you set a DACL on the registry keys, you can prevent any user from ... In other words the GPO was still ... >>> I had set Group Policy on the domain controller so that the client ...
    (microsoft.public.win2000.group_policy)
  • Re: Time GPO for Clients
    ... not make it into the registry even though the GPO is properly configured. ... GPO's apply these particular settings, so there should be no conflicts. ... I'll have to test with another client machine to see if it is now ...
    (microsoft.public.windows.server.active_directory)