Re: Grpedit.msc from bootable cd

Sam Hobbs wrote:

"Marco Schlegel" <no@xxxxxxxx> wrote in message news:%23FRaM8MOIHA.4752@xxxxxxxxxxxxxxxxxxxxxxx

On a working Windows XP machine snap the registry then do the changes in the Group Policy then re-snap the registry then do a compare for the differences between the two snaps. This registry snap & compare technique is almost like a closely guarded trade secret, I don't give it out everyday!

Hi John

In a Microsoft tech article I read that the group policy security settings are not stored in the registry :-(
Is that not true?

Regards


It probably depends on what is meant by "stored". I know that some Group Policies, probably most, are effective only when they are put into the registry. It is possible to affect the effectivity of a policy by changing only the registry. The confusion lprobably is that the policy editor edits data from a non-registry file that administrators are more familiar with than I. Any changes made by the policy editor will be ineffective unless they are put into the registry.

Does that sound like an explanation of what the "Microsoft tech article" meant?

No, Sam. The security settings are saved and applied elsewhere, I don't believe that you can restore the logon rights by registry modifications.

John
.

Relevant Pages

  • Re: Group Policy question
    ... I was wondering why my Group Policy Help section would have directed ... Steve, I asked a question, which is just under this one about an account ... I do know to not mess with the registry ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Custom GPO and suggested settings
    ... You can't change what portion of the registry a particular setting lives in, ... The main difference between a policy ... moves out of scope of a Group Policy the registry ... Policies are generally considered to be 'better' than preferences. ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy question
    ... Thans to all who responded to my question about group policy and how to ... I do know to not mess with the registry ... able to use it to some degree to lock down the limited account I created I ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy question
    ... Policies" and Local Security Policy that is a subset of local Group Policy. ... the registry directly unless given direct and cohesive instructions ...
    (microsoft.public.windowsxp.security_admin)
  • Re: What program is used to write events to the event log??????
    ... The intent of Safer is for it to be applied from AD in GPOs. ... that they are refteshed by the sce policy engine. ... > registry files is that while apparently the restrictions are aplied...you ... >>> issue....whenever there is an exe being started it normally writes this ...
    (microsoft.public.windowsxp.security_admin)
Loading