Re: Registry tatooing

Just an update on this. I promised that I was working on a utility to clean up policies. The utility is now available as a free download (well you do have to register for it but otherwise, there is no cost on it). It can be found at www.sdmsoftware.com/products.php. It can list and clean true policies, preferences and Software Restriction Policies.


Please check it out and provide feedback.

Thanks!

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php


"Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx> wrote in message news:C6BE938B-66E2-47AD-ABFD-4C398DA96422@xxxxxxxxxxxxxxxx
I'm working on a utility that will clean up GP policies and preferences. I haven't tested it on NT4 but will do if I get time. Assuming the same mechanisms were used then as are used in GP, it should be trivial. I will post here when its ready to test.


--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php


"Ace Fekay [MVP]" <PleaseAskMe@xxxxxxxxxxxxxx> wrote in message news:%23RKP6D4MHHA.5016@xxxxxxxxxxxxxxxxxxxxxxx
In news:0CF69BAD-EC15-4463-B708-91CB8F71CFDE@xxxxxxxxxxxxx,
Erik Cheizoo <echeizoo.XenD.nl@xxxxxxxxxxxxxxxxxxxx> stated, which I commented on below:
Unfortunately, there is no such thing as registry reset (if you don't
count setup.exe as an viable solution ;-) )
The only way to revert tattooed settings is creating a reverse policy
(with the opposite setting), leave it for a few weeks (till all
workstations/users have logged on at least once) and then set the
setting to not defined.

I must agree. Administrative policies work very similar to NT4 System Policies. I remember one NT4 customer years ago who had system policies in place. He decided he didn't want them anymore and just yanked the policy. Well, to his disliking, the settings remained. I suggested to put the policy back in place, set the settings he didn't want to 'disalbed', and wait for the policy to apply (usually wait a day or two to make sure all workstations get the settings). Then onve applied to all workstations, set those same settings back to 'default' (grayed out), wait for it to apply, then yank it.


--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express or any other newsreader), and configure a news account, pointing to news.microsoft.com. This is a direct link to the Microsoft Public Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you to easily find, track threads, cross-post, sort by date, poster's name, watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...



.

Relevant Pages

  • RE: Remote Assistance not working
    ... I have tried these settings you recommend with no results. ... I have yet to get the offer remote assistance to work when launched from the ... The Group Policy on the computer of the novice user must be configured ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: Parts of GPO not working.
    ... If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help. ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Parts of GPO not working.
    ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Re: Registry tatooing
    ... I'm working on a utility that will clean up GP policies and preferences. ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... Administrative policies work very similar to NT4 System Policies. ... Well, to his disliking, the settings remained. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)