Re: How do I add/edit a registry key using group policy?

From: Jimmy Andersson [MVP] (jimmy_NO_SPAM__at_mvps.org)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 13:31:31 +0100

Regedit /s, you can also use the reg command. reg /? for info.

Regards,
/Jimmy 

-- 
Jimmy Andersson, Q Advice AB
Microsoft MVP - Directory Services
---------- www.qadvice.com ----------
"jas0n" <no@email.here> wrote in message 
news:4219d26e$0$38040$bed64819@news.gradwell.net...
> jas0n wrote:
>> We have a situation with regards to Acive Directory where our large 
>> number of groups is stopping various tasks with various errors such as 
>> 'cannot complete task out of storage space'. Things like adding a domain 
>> group or user to a workstation get this error for example.
>>
>> Its been tracked down to the following registry key where ive added the 
>> DWord 'MaxTokenSize' and a value of 100000 whereas the default is 12000. 
>> This has solved the problems on machines it has been applied to so we 
>> want to distribute this to all across the domain.
>>
>> The "MaxPacketSize" dword already existed, its only the "MaxTokenSize" I 
>> want to affect ... if it already exists to edit it to 100000 or create it 
>> and set it at 100000 if it doesnt exist.
>>
>> How/Can I do this with group policy?
>>
>> Windows Registry Editor Version 5.00
>>
>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters] 
>> "MaxPacketSize"=dword:00000001
>> "MaxTokenSize"=dword:00100000
>
> Looking around a StartUp script seems to be one way of doing it, so do I 
> put the following into a MaxTokenSize.reg file:-
>
> Windows Registry Editor Version 5.00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters]
>
> "MaxTokenSize"=dword:00100000
>
> ... and then call it from a StartUp script? Whats the syntax for calling a 
> reg file, I saw one mention of:-
>
> regedit -s \\server\scripts\maxtokensize.reg
>
> is this right?
>

Relevant Pages