Re: Grpedit.msc from bootable cd

"Marco Schlegel" <no@xxxxxxxx> wrote in message
news:%23FRaM8MOIHA.4752@xxxxxxxxxxxxxxxxxxxxxxx
On a working Windows XP machine snap the registry then do the changes in
the Group Policy then re-snap the registry then do a compare for the
differences between the two snaps. This registry snap & compare
technique is almost like a closely guarded trade secret, I don't give it
out everyday!

Hi John

In a Microsoft tech article I read that the group policy security settings
are not stored in the registry :-(
Is that not true?

Regards

It probably depends on what is meant by "stored". I know that some Group
Policies, probably most, are effective only when they are put into the
registry. It is possible to affect the effectivity of a policy by changing
only the registry. The confusion lprobably is that the policy editor edits
data from a non-registry file that administrators are more familiar with
than I. Any changes made by the policy editor will be ineffective unless
they are put into the registry.

Does that sound like an explanation of what the "Microsoft tech article"
meant?



.

Relevant Pages

  • Re: Group Policy question
    ... I was wondering why my Group Policy Help section would have directed ... Steve, I asked a question, which is just under this one about an account ... I do know to not mess with the registry ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Custom GPO and suggested settings
    ... You can't change what portion of the registry a particular setting lives in, ... The main difference between a policy ... moves out of scope of a Group Policy the registry ... Policies are generally considered to be 'better' than preferences. ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy question
    ... Thans to all who responded to my question about group policy and how to ... I do know to not mess with the registry ... able to use it to some degree to lock down the limited account I created I ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy question
    ... Policies" and Local Security Policy that is a subset of local Group Policy. ... the registry directly unless given direct and cohesive instructions ...
    (microsoft.public.windowsxp.security_admin)
  • Re: What program is used to write events to the event log??????
    ... The intent of Safer is for it to be applied from AD in GPOs. ... that they are refteshed by the sce policy engine. ... > registry files is that while apparently the restrictions are aplied...you ... >>> issue....whenever there is an exe being started it normally writes this ...
    (microsoft.public.windowsxp.security_admin)