Re: Registry tatooing

I'm working on a utility that will clean up GP policies and preferences. I haven't tested it on NT4 but will do if I get time. Assuming the same mechanisms were used then as are used in GP, it should be trivial. I will post here when its ready to test.


--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php


"Ace Fekay [MVP]" <PleaseAskMe@xxxxxxxxxxxxxx> wrote in message news:%23RKP6D4MHHA.5016@xxxxxxxxxxxxxxxxxxxxxxx
In news:0CF69BAD-EC15-4463-B708-91CB8F71CFDE@xxxxxxxxxxxxx,
Erik Cheizoo <echeizoo.XenD.nl@xxxxxxxxxxxxxxxxxxxx> stated, which I commented on below:
Unfortunately, there is no such thing as registry reset (if you don't
count setup.exe as an viable solution ;-) )
The only way to revert tattooed settings is creating a reverse policy
(with the opposite setting), leave it for a few weeks (till all
workstations/users have logged on at least once) and then set the
setting to not defined.

I must agree. Administrative policies work very similar to NT4 System Policies. I remember one NT4 customer years ago who had system policies in place. He decided he didn't want them anymore and just yanked the policy. Well, to his disliking, the settings remained. I suggested to put the policy back in place, set the settings he didn't want to 'disalbed', and wait for the policy to apply (usually wait a day or two to make sure all workstations get the settings). Then onve applied to all workstations, set those same settings back to 'default' (grayed out), wait for it to apply, then yank it.


--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express or any other newsreader), and configure a news account, pointing to news.microsoft.com. This is a direct link to the Microsoft Public Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you to easily find, track threads, cross-post, sort by date, poster's name, watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...


.

Relevant Pages

  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: Registry tatooing
    ... It can list and clean true policies, ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... Well, to his disliking, the settings remained. ...
    (microsoft.public.windows.server.active_directory)
  • Re: New Password Policy Implementation Problem
    ... Default Domain Group Policy object. ... > able to implement the following settings via the Default Domain ... > Enforce Password History ... > These policies were enforced for all domain users and we verified the ...
    (microsoft.public.windows.group_policy)
  • Re: New Password Policy Implementation Problem
    ... Default Domain Group Policy object. ... > able to implement the following settings via the Default Domain ... > Enforce Password History ... > These policies were enforced for all domain users and we verified the ...
    (microsoft.public.win2000.group_policy)
  • RE: Failed to create a trust relationship between NT4 and 2003 AD
    ... After I applied the above policy setting in Domain Security Setting on the ... I reloaded it and tried the net view command from NT4 server. ... For Windows 2000 and 2003 these settings may be applied/configured via ...
    (microsoft.public.windows.server.migration)