Re: Change specific registry settings with Group Policy

That sounds like a cool idea to try but the problem is that the user has
only read permissions to the keys that maintain most [administrative
templates] GP settings [ HKCU_software_policies] which override any like
settings the user can modify in the registry. However since GP IE
maintenance is not controlled by an administrative template it should work
in this case. The proxy setting is controlled via the
HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ProxyServer: and as you said you could create two .reg files for
the user to choose from. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;310516 ---
crearing and using .reg files.


"Chamber" <Chamber@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E1D652BF-4EEB-4A82-9469-C772A246082C@xxxxxxxxxxxxxxxx
> There are quite a few different ways to script this. You could use the
> reg.exe command - goto a command prompt and type in reg to check out the
> syntax. Since you would want to read the value first and then toggle it,
> another scripting language might be easier - .vbs maybe or AutoIT works
> really well http://www.autoitscript.com/autoit3/
> --
> Chamber
>
>
> "JB" wrote:
>
>> Interesting......how would I do that for a reg key to go from "0" to "1"?
>>
>> "Chamber" wrote:
>>
>> > Maybe you could put an icon on their desktop that could toggle the
>> > setting?
>> > Just a thought.
>> > --
>> > Chamber
>> >
>> >
>> > "JB" wrote:
>> >
>> > > Hmmmmm......anyway to stop the caching of doman credentials?
>> > >
>> > > "Steven L Umbach" wrote:
>> > >
>> > > > You would have to create a local user account for them to logon to.
>> > > > If they
>> > > > logon to their computer with cached domain credentials then Group
>> > > > Policy
>> > > > settings will still apply. --- Steve
>> > > >
>> > > >
>> > > > "JB" <JB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> > > > news:E3F7B44C-3CE3-4449-ABBC-61B560C0BC71@xxxxxxxxxxxxxxxx
>> > > > >I have one that I do NOT want to persist when my users are off the
>> > > > >domain.
>> > > > >We
>> > > > > use a proxy server on campus, but the teachers' laptops are
>> > > > > holding the
>> > > > > ProxEnable setting when at home. How do I stop THAT one?
>> > > > >
>> > > > > "Chamber" wrote:
>> > > > >
>> > > > >> Yes, I apologize for not making that clear in my posting. It
>> > > > >> does make
>> > > > >> that
>> > > > >> somewhat apparent in the document I used. I created one with
>> > > > >> multiple
>> > > > >> just
>> > > > >> as you show below. Thanks for clarifying and thanks for the new
>> > > > >> link!
>> > > > >> --
>> > > > >> Chamber
>> > > > >>
>> > > > >>
>> > > > >> "Steven L Umbach" wrote:
>> > > > >>
>> > > > >> > This link might be easier to understand. It was for me for the
>> > > > >> > more
>> > > > >> > simple
>> > > > >> > settings that are either enabled or disabled.
>> > > > >> >
>> > > > >> > http://thelazyadmin.com/index.php?/archives/125-Creating-Custom-ADM-Templates.html
>> > > > >> >
>> > > > >> > To the original poster - you do not need to create a custom
>> > > > >> > template
>> > > > >> > for
>> > > > >> > every registry setting. Below is a simple .adm template with
>> > > > >> > multiple
>> > > > >> > settings using the same keyname. The explain line is optional
>> > > > >> > and is
>> > > > >> > what
>> > > > >> > will show in the explanation box when you configure the
>> > > > >> > setting. The
>> > > > >> > policy
>> > > > >> > name is the name for the setting that you will see under the
>> > > > >> > category
>> > > > >> > while
>> > > > >> > the category is the name you will see under administrative
>> > > > >> > templates
>> > > > >> > after
>> > > > >> > you unckeck the option for show only policies that can be
>> > > > >> > fully managed
>> > > > >> > in
>> > > > >> > the filtering option of view when you have administrative
>> > > > >> > templates
>> > > > >> > highlighted. --- Steve
>> > > > >> >
>> > > > >> > CLASS USER
>> > > > >> >
>> > > > >> > CATEGORY "Explorer file display options"
>> > > > >> > KEYNAME
>> > > > >> > "Software\Microsoft\windows\currentversion\explorer\advanced"
>> > > > >> >
>> > > > >> > POLICY "Allow vieweing hidden files and folders via Explorer"
>> > > > >> > EXPLAIN "Allow viewing of hidden files and folders in
>> > > > >> > Explorer"
>> > > > >> > VALUENAME "hidden"
>> > > > >> > VALUEON NUMERIC 1
>> > > > >> > VALUEOFF NUMERIC 2
>> > > > >> > END POLICY
>> > > > >> >
>> > > > >> > POLICY "Allow access system files/folder via Explorer"
>> > > > >> > EXPLAIN "Show system files in Explorer"
>> > > > >> > VALUENAME "Showsuperhidden"
>> > > > >> > VALUEON NUMERIC 1
>> > > > >> > VALUEOFF NUMERIC 0
>> > > > >> > END POLICY
>> > > > >> >
>> > > > >> > POLICY "Allow display file extensions via Explorer"
>> > > > >> > EXPLAIN "Show file extensions known file types in Explorer"
>> > > > >> > VALUENAME "HideFileExt"
>> > > > >> > VALUEON NUMERIC 0
>> > > > >> > VALUEOFF NUMERIC 1
>> > > > >> > END POLICY
>> > > > >> >
>> > > > >> > POLICY "Display contents of system folders via Explorer"
>> > > > >> > EXPLAIN "Allow display of contents of system folders in
>> > > > >> > Explorer"
>> > > > >> > VALUENAME "WebViewBarricade"
>> > > > >> > VALUEON NUMERIC 1
>> > > > >> > VALUEOFF NUMERIC 0
>> > > > >> > END POLICY
>> > > > >> >
>> > > > >> > END CATEGORY
>> > > > >> >
>> > > > >> >
>> > > > >> > "Chamber" <Chamber@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> > > > >> > news:90B42A9D-231F-4429-A8A6-22E64D51DE67@xxxxxxxxxxxxxxxx
>> > > > >> > > If you want the registry setting to be persistent, then you
>> > > > >> > > will
>> > > > >> > > need to
>> > > > >> > > create a custom template. I have done it using the
>> > > > >> > > following
>> > > > >> > > document
>> > > > >> > > http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/gp/admtgp.mspx,
>> > > > >> > > although it still doesn't make it very easy. If find other
>> > > > >> > > documentation,
>> > > > >> > > please post a link.
>> > > > >> > > --
>> > > > >> > > Chamber
>> > > > >> > >
>> > > > >> > >
>> > > > >> > > "Jonte@xxxxxxx" wrote:
>> > > > >> > >
>> > > > >> > >> If I want to change the registry with a GPO and it's not a
>> > > > >> > >> "standard"
>> > > > >> > >> policy
>> > > > >> > >> (administrative templates), then I have to make my own
>> > > > >> > >> administrative
>> > > > >> > >> template, is that right ? Or is there another way ?
>> > > > >> > >> If it's right, should I make an own administrative template
>> > > > >> > >> for
>> > > > >> > >> every own
>> > > > >> > >> registry change ?
>> > > > >> > >>
>> > > > >> > >> Please help me out.
>> > > > >> > >>
>> > > > >> > >> Sincerely
>> > > > >> > >>
>> > > > >> > >> \\Jonas B
>> > > > >> > >>
>> > > > >> > >>
>> > > > >> > >>
>> > > > >> >
>> > > > >> >
>> > > > >> >
>> > > >
>> > > >
>> > > >


.

Relevant Pages

  • Re: Change specific registry settings with Group Policy
    ... There are quite a few different ways to script this. ... reg.exe command - goto a command prompt and type in reg to check out the ... Since you would want to read the value first and then toggle it, ... Chamber ...
    (microsoft.public.windows.group_policy)
  • Re: Change specific registry settings with Group Policy
    ... "Chamber" wrote: ... > There are quite a few different ways to script this. ... > reg.exe command - goto a command prompt and type in reg to check out the ... Since you would want to read the value first and then toggle it, ...
    (microsoft.public.windows.group_policy)
  • Re: Drop to DOS prompt
    ... In Win2000 there is no DOS either. ... Command Prompt. ... DOS is an operating system. ...
    (microsoft.public.win2000.general)