Re: Applying group policy via VBScript

Tech-Archive recommends: Fix windows errors by optimizing your registry


"Darren Mar-Elia (MVP)" <dmanonymous@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:%23caFwyd0GHA.3716@xxxxxxxxxxxxxxxxxxxxxxx
Karina-
I think the point here is that these registry values are exactly what GP
was
designed to take care of. Because some of your changes need to occur in
HKLM, that means that if you wrote a script, the HKLM changes would need
to
run under a computer startup script, while the HKCU would need to run as a
user logon script. Instead, Mark and others are suggesting the built-in
capabilities of Group Policy ADM templates, which already include these
registry values. Another thing to keep in mind, which hasn't been
mentioned,
is when you try to set policy keys outside of GP--the "non-tattooing"
effect
of these policy keys will essentially be broken by trying to set them via
script. Specifically, the policy keys are only cleaned up when they are
delivered as part of Group Policy. Thus, by trying to deliver them as vb
scripts, you circumvent this cleanup and so have to manage these as if
they
were preferences.

Bottom line is, why reinvent the wheel? I think folks are trying to
understand why you would want to set these outside of group policy? If its
just an exercise in VB scripting, then you may be better off finding some
other values to modify. These keys were specifically built with Group
Policy
in mind.

Hope that helps.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related
Group Policy Management solutions at http://www.sdmsoftware.com


"Karina" <Karina@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:eum1fac0GHA.3440@xxxxxxxxxxxxxxxxxxxxxxx
"Mark Heitbrink [MVP]" <spam-only@xxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:ONsCkKc0GHA.2036@xxxxxxxxxxxxxxxxxxxxxxx

Hi,
Karina schrieb:
why using vbscript? because I consider it as advanced way, and handy.

Hm. If can exclude permission problems, than perhaps it is an easy way
to edit the registry on clients, but if like to have it in a secure
envirement, where users are even not aloud to edit the registry, I
would get back to GPO (AdmTempl)
The other point is: Why creating a script, if a GUI is already there
and only has to be set the policies to "activeated".

The other point is: Scripts are usally not running on a Slow Link
Connection, Registry settings via AdmTempl do.

Mark
-
Mark Heitbrink - MVP Windows Server - Group Policy

Homepage: www.gruppenrichtlinien.de - deutsch
Blog: gpupdate.spaces.live.com - english

--------
sorry, I dont understand your logic.

------------

we talk about different things. you talk about how this 'must' be, must be
'correctly'.
But I have asked concrete specific question, about this specific issue.
Kellys-korner-xp.com also contains this specific tweak.(tweak 142) I need
do the same, just in vbscript.

Karina

.

Relevant Pages

  • Re: Mapping drives and adding to the path
    ... Please be absolutely certain that the PATH registry key stay as ... You will need to run with the elevated privileges of the Group Policy login ... script instead of the logged-on user to make these modifications. ... Perhaps you can use the REG command to manipulate this key (belive this ...
    (microsoft.public.windows.server.scripting)
  • Re: Applying group policy via VBScript
    ... I think the point here is that these registry values are exactly what GP was ... HKLM, that means that if you wrote a script, the HKLM changes would need to ... capabilities of Group Policy ADM templates, ... the policy keys are only cleaned up when they are ...
    (microsoft.public.windows.group_policy)
  • Re: Applying group policy via VBScript
    ... Well if you want to do this through VBScript, ... Group Policy Management solutions at http://www.sdmsoftware.com ... I think the point here is that these registry values are exactly what GP ... HKLM, that means that if you wrote a script, the HKLM changes would need ...
    (microsoft.public.windows.group_policy)
  • Re: RegWrite error
    ... > the same rights to the registry. ... If this script is run under the users security credentials, ... I see you say something about group policy and all have the same ... under the system context and has admin rights. ...
    (microsoft.public.scripting.vbscript)
  • Re: Admin / Domain Admin rights problem
    ... As far as Group Policy - registry you will not see that in Local ... >> Key and SubKey - Type of Access: ... >> Detailed Access Flags: ...
    (microsoft.public.win2000.security)