How do I add/edit a registry key using group policy?

From: jas0n (no_at_email.here)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 11:45:31 +0000

We have a situation with regards to Acive Directory where our large
number of groups is stopping various tasks with various errors such as
'cannot complete task out of storage space'. Things like adding a domain
group or user to a workstation get this error for example.

Its been tracked down to the following registry key where ive added the
DWord 'MaxTokenSize' and a value of 100000 whereas the default is 12000.
This has solved the problems on machines it has been applied to so we
want to distribute this to all across the domain.

The "MaxPacketSize" dword already existed, its only the "MaxTokenSize" I
want to affect ... if it already exists to edit it to 100000 or create
it and set it at 100000 if it doesnt exist.

How/Can I do this with group policy?

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
"MaxPacketSize"=dword:00000001
"MaxTokenSize"=dword:00100000

Relevant Pages

  • Re: How do I add/edit a registry key using group policy?
    ... > We have a situation with regards to Acive Directory where our large ... > Windows Registry Editor Version 5.00 ... Looking around a StartUp script seems to be one way of doing it, ...
    (microsoft.public.win2000.group_policy)
  • Re: How do I add/edit a registry key using group policy?
    ... Microsoft MVP - Directory Services ... > We have a situation with regards to Acive Directory where our large number ... Things like adding a domain group or ... > Windows Registry Editor Version 5.00 ...
    (microsoft.public.win2000.group_policy)
  • Re: All programs try to use Excel to open
    ... Windows Registry Editor Version 5.00 ... Regards ... John ... >> Tried the exe fix, ...
    (microsoft.public.windowsxp.help_and_support)