Re: How do I add/edit a registry key using group policy?

From: Jimmy Andersson [MVP] (jimmy_NO_SPAM__at_mvps.org)
Date: 02/21/05


Date: Mon, 21 Feb 2005 13:18:46 +0100

Why not just export the correct settings (as you probably done at the end of
your post) and then use the reg command to import it?
You can do this in a script that you then distribute via a GPO.

Regards,
/Jimmy

-- 
Jimmy Andersson, Q Advice AB
Microsoft MVP - Directory Services
---------- www.qadvice.com ----------
"jas0n" <no@email.here> wrote in message 
news:4219c9dc$0$38044$bed64819@news.gradwell.net...
> We have a situation with regards to Acive Directory where our large number 
> of groups is stopping various tasks with various errors such as 'cannot 
> complete task out of storage space'. Things like adding a domain group or 
> user to a workstation get this error for example.
>
> Its been tracked down to the following registry key where ive added the 
> DWord 'MaxTokenSize' and a value of 100000 whereas the default is 12000. 
> This has solved the problems on machines it has been applied to so we want 
> to distribute this to all across the domain.
>
> The "MaxPacketSize" dword already existed, its only the "MaxTokenSize" I 
> want to affect ... if it already exists to edit it to 100000 or create it 
> and set it at 100000 if it doesnt exist.
>
> How/Can I do this with group policy?
>
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
> "MaxPacketSize"=dword:00000001
> "MaxTokenSize"=dword:00100000 


Relevant Pages

  • Re: Deleting Old computer accounts
    ... >> Regards, ... >> Jimmy Andersson, Q Advice AB ... >> Microsoft MVP - Directory Services ... >>> will show you the number of obsolete computer accounts in your AD. ...
    (microsoft.public.win2000.active_directory)
  • Re: UPGRADE VS. MIGRATE
    ... Regards, ... MS Apps that are part ... >> Jimmy Andersson, Q Advice AB ... >> Microsoft MVP - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Demote - Cleanup
    ... remains in the sites and services as well after demote. ... Regards ... Microsoft MVP - Directory Services ... > records in the AD integrated DNS zones regarding that server is not ...
    (microsoft.public.win2000.active_directory)
  • Re: AD problems
    ... "Niklas Banck" skrev i meddelandet ... > Best Regards ... >> Christoffer Andersson ... >> Microsoft MVP - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: All programs try to use Excel to open
    ... Windows Registry Editor Version 5.00 ... Regards ... John ... >> Tried the exe fix, ...
    (microsoft.public.windowsxp.help_and_support)