Re: Re: How do I add/edit a registry key using group policy?

From: Jordan (nojunk_allowed_at_nospam.com)
Date: 02/23/05


Date: Tue, 22 Feb 2005 21:07:35 -0500

If the users are not Admins will they be able to run the login script for
items under HKLM??

This is probably best set via machine group policies.

"lforbes" <UseLinkToEmail@WindowsForumz.com> wrote in message
news:421bb1c8$1_2@alt.athenanews.com...
> "Stephen Lawlor" wrote:
> > you can create a GPO containing the key and send it down to
> > all pcs on the
> > domain.
> > Click edit on a policy and goto computer configuration -
> > windows settings -
> > security settings and right click registry. you can then add
> > the registry
> > key from your current pc.
> > then send this down to a test OU and if that works the
> > domain.
> >
> >
> >
> >
> > "Jimmy Andersson [MVP]" wrote:
> >
> > > You can use .bat or .cmd if you want.
> > >
> > > Regards,
> > > /Jimmy
> > > --
> > > Jimmy Andersson, Q Advice AB
> > > Microsoft MVP - Directory Services
> > > ---------- www.qadvice.com ----------
> > >
> > >
> > > "jas0n" &lt;no@email.here&gt; wrote in message
> > > news:4219dc9d$0$38044$bed64819@news.gradwell.net...
> > &nbsp;> > Jimmy Andersson [MVP] wrote:
> > &nbsp;&nbsp;> >> Why not just export the correct settings (as
> > you probably done at the end
> > &nbsp;&nbsp;> >> of your post) and then use the reg command to
> > import it?
> > &nbsp;&nbsp;> >> You can do this in a script that you then
> > distribute via a GPO.
> > &nbsp;&nbsp;> >>
> > &nbsp;&nbsp;> >> Regards,
> > &nbsp;&nbsp;> >> /Jimmy
> > &nbsp;> >
> > &nbsp;> > yes, I exported it that way ....
> > &nbsp;> >
> > &nbsp;> > a startup script seems the way as it runs with high
> > enough security to
> > &nbsp;> > change the HKLM, whereas a logon script wouldnt.
> > &nbsp;> >
> > &nbsp;> > would I use the command:-
> > &nbsp;> >
> > &nbsp;> > reg import \serverfilesregchange.reg
> > &nbsp;> >
> > &nbsp;> > if thats it, what is the startup script saved as?
> > ive never used them, are
> > &nbsp;> > they .wsh files or can it just be a .bat or .cmd ?
> > &nbsp;> >
> > &nbsp;> > how could I add a command so it only actions it if
> > the key doesnt exist?
> > >
> > >
> > >
>
> Hi,
>
> Just to add another to the mix, you can do it as a VBScript Startup
> Script. I do it all the time to edit my machine registries. Then
> schedule restarts with shutdown.exe command. Test first as I don't
> usually use the DWORD and may have the settings off.
>
> Dim Path
> Path =
> "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerbero
> s\Parameters\"
> set ws = WScript.CreateObject("WScript.Shell")
> o=ws.RegWrite(Path & "MaxPacketSize", "00000001", "REG_DWORD")
> v=ws.RegRead(Path & "MaxPacketSize")
> Set WSHShell = nothing
>
> Path =
> "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerbero
> s\Parameters\"
> set ws = WScript.CreateObject("WScript.Shell")
> o=ws.RegWrite(Path & "MaxTokenSize", "00100000", "REG_DWORD")
> v=ws.RegRead(Path & "MaxTokenSize")
> Set WSHShell = nothing
>
> Cheers,
>
> Lara
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's
> request
> Articles individually checked for conformance to usenet standards
> Topic URL:
> http://www.windowsforumz.com/Group-Policy-add-edit-registry-key-ftopict267962.html
> Visit Topic URL to contact author (reg. req'd). Report abuse:
> http://www.windowsforumz.com/eform.php?p=844276



Relevant Pages

  • Re: Message text for users attempting to log in
    ... You could do this in a batch file, ... to change the registry setting and will work from a logon script or the AT ... > If using login script the 2000/XP systems will need ... >>type logon banner when users log on. ...
    (microsoft.public.win2000.security)
  • Re: How to change settings for all users
    ... Create a login script, set it to be used for the User Configuration (using ... In the script use the reg.exe command to change the item in the registry. ... I need to make a change to our Windows 2000 image that will take effect ... Basically the setting that I need to change is to allow Internet ...
    (microsoft.public.win2000.registry)
  • Message text for users attempting to log in
    ... If you have W2K domain use domain security policy. ... If using login script the 2000/XP systems will need ... administrator rights to add to the registry. ... >type logon banner when users log on. ...
    (microsoft.public.win2000.security)
  • Re: Message text for users attempting to log in
    ... >but it's hard to know for sure whether the batch file ... >> Otherwise you can do via login script using REG ... >> exporting the registry entry and merging it (there is a ... >>>type logon banner when users log on. ...
    (microsoft.public.win2000.security)