Re: howto: remove "extra registry settings" showing in GPO

I'm glad that you've all the answers for your problem.
Have a nice day.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"CaliChoas" <CaliChoas.327nzc@xxxxxxxxxxxxx> wrote in message news:CaliChoas.327nzc@xxxxxxxxxxxxxxxx

Jorge Silva;3407635 Wrote:
The keys will only be created if the policy has the option configured to
disabled or enable, if the configuration of the ~Policy is = Not
configured,
no changes are made in the registry.
RsOP.msc is your friend but only to chck the settings and where those
settings are comming from.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services


-------------

I wonder sometimes when people comae back and read these threads if any
of it makes sense. So as a recap.

I had bad policy objects, most likely from a SMS install that was not
properly uninstalled, or a template that no longer existed in the
environment. LIke many others this environment is NOT my creation.. I
just have to maintain it and make it work better.

Using RSOP I identified the keys in the registry that were "EXTRA" (NOT
KNOWN).

THEN using the regtoadmin tool I was able to get those extra those
registry keys into a template.

Using that template and some basic trial and error .. I set the values
to "not configured"

next I verified with RSOP that the "extras" were no longer being
applied.

and I win!

was this the right way? no.
was this elegant? no
was this supported by anyone? no

should I simply document the settings I need, run Dcgpofix and call it
a day? Yes

do I have approval for that from management? No


--
CaliChoas
------------------------------------------------------------------------
CaliChoas's Profile: http://forums.techarena.in/member.php?userid=37349
View this thread: http://forums.techarena.in/showthread.php?t=874935

http://forums.techarena.in


.

Relevant Pages

  • GP Administrative template - cant get it to work
    ... I'm trying to manage som Windows Explorer settings by use of a custom build ... The registry receives the settings from til template but the changes does ... I have forced the policy by gpupdate and logout/login - ...
    (microsoft.public.win2000.group_policy)
  • Re: CIS Security Baseline
    ... I believe the standard method is to use secedit from the command line. ... In the absence of a complete template that sets default settings for all specific ... as would be a complete template. ... this is why these Security Configuration Editor templates are designed to be ...
    (microsoft.public.win2000.security)
  • Re: Word 2002 font dropdown list
    ... This template includes a macro ... settings, including NoFontMRUList. ... See also "How to use the Registry ... Word MVP FAQ site: http://word.mvps.org ...
    (microsoft.public.word.customization.menustoolbars)
  • Re: IP Connection Choose Static or DHCP
    ... To set static ip addresses you'll need to edit the registry. ... The settings with their names and descriptions can be found here: ... However at a few sites they have DHCP ... and gateway, or change the configuration to DHCP, then renew the address. ...
    (microsoft.public.pocketpc.developer.networking)
  • Re: Restrict domain users to modify HKEY_CUURENT_USER
    ... I suggest you implement Group Policy first to restrict access. ... configuration contains many settings that are "user friendly" access to registry ... settings that can be quickly implemented. ...
    (microsoft.public.win2000.security)