Registry changes made via ADM file disappear after a reboot

Tech-Archive recommends: Fix windows errors by optimizing your registry



I am having a problem with a registry setting that I am updating via an ADM I
have imported into the GPO and I have been tearing my hairout trying to
figure this out.

Basically, I need to make the ShowLogonOptions
(HKLM/Software/Microsoft/Windows NT/Winlogon) setting from 1 to 0 and set the
default domain. We are being told by auditors that we cannot display the
"Log on to:" box on any of our terminal servers. I created a custom ADM that
I found here:

http://www.tomshardware.com/forum/223570-46-remove-domain-drop-list

I am able to add the ADM without any trouble. I then run a gpudate and I
check the registry and I see the registry value change from a 1 to a 0. I
reboot the server and the registry value reverts back to 1.

I run rsop.msc and gpresult and it shows that I am updating the correct
policy. Just for good measure I applied the policy to every GPO that I have
in my domain. I don't have any special log out scripts, this is a pretty
vanilla server.

There are a couple of things that might have bearing on any answers to my
forthcoming questions. First, I am testing these settings on a development
domain controller at my house. Second, I have to unapply (uncheck) the
filter "Only show policy settings that can be fully managed" otherwise I
cannot see the settings in the Administrative Template that I created and
imported as described above.

My question is how do I get these settings to apply to the registry via the
GPO and then have them stick after a reboot? I am fairly new to GPO's and
ADMs. Am I missing something fundamentally easy here?

Thanks and I look forward to the reply.

.



Relevant Pages

  • RE: Windows 2kserver with XP clients - Policies
    ... you mean that you want to control specific XP settings ... Another thing you can do is to import .ADM templates from a Windows ... On a XP machine install a registry monitor tool which monitors the ... if you want to have a gPO setting that disables the ...
    (Security-Basics)
  • Re: Long binary values in ADMs
    ... ADM templates do not support the binary data type. ... Policy Maker ... Professional includes a free Registry extension which supports all data ... You can also filter individual settings using 25 ...
    (microsoft.public.windows.group_policy)
  • Re: Time GPO for Clients
    ... not make it into the registry even though the GPO is properly configured. ... GPO's apply these particular settings, so there should be no conflicts. ... I'll have to test with another client machine to see if it is now ...
    (microsoft.public.windows.server.active_directory)
  • RE: Prevent folder redirection on my xp pro laptop (delete fdeploy.dll
    ... Hacking the registry is the only way to change your settings. ... and I want to disable the folder redirection for ... So after some googling and getting to know more about GPO etc. than I ever ...
    (microsoft.public.windows.group_policy)
  • Re: File Blocking frustration
    ... Ive set the GPO settings to not block ANY previous version files and Ive also ... my personal machine does not have this registry setting applied and I ... have no problems opening previous version Word docs with Word 2007. ...
    (microsoft.public.word.docmanagement)