Re: Modify Registry on all SBS2003 clients

Only administrators, system, and creator/owner have greater than read
permissions on the subkeys of
hklm\system\currentcontrolset\control. (by default)

If your users are admins on their box then it should work. Otherwise take
another look at the group policy add in I mentioned earlier. It'll will give
you much greater control and flexability with this and other registry
settings going forward.



--
/kj
"Buddy Greenshield" <gcsbend-at-bendcable-dot-com> wrote in message
news:eEWUUIMqGHA.2464@xxxxxxxxxxxxxxxxxxxxxxx
It should, but you would need to test it for sure.

Buddy G.

"G. Uri" <GUri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9D22D2DC-0DC8-4621-A160-A4FCB7050176@xxxxxxxxxxxxxxxx
Thanks, but i have one question: Will the reg add comand work if the
users
logging on the client computer dont have administrative rights on the
client
computers?

""Jenny wu [MSFT]"" wrote:

Hi G. Uri,

Thanks for using the SBS newsgroup. Many thanks for KJ and Buddy's
input.

From your description, I understand that you want to know how to deploy
a
registry setting to all workstations. If I am off base, please don't
hesitate to let me know.

Buddy's solution is perfect. You can try to test it.

Also please let me know if all workstations in the SBS 2003 domain are
running Windows XP or later. If yes, we can also use the XP built-in
command "REG ADD" to modify registry.

For example, the following command will change the registry value as
your
description:

reg add
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\StorageDevicePolicies/
v WriteProtect /t Dword /d "1" /f

HINT: For more information regarding the "Reg Add" command-line
switches,
please run "Reg Add /?".

You may copy above command into the login script file
SBS_LOGIN_SCRIPT.bat
and put the command lines at the bottom of the script file. So, when the
workstations reboot next time, the Login Script will be executed
automatically to modify the registry value. After you ensure all
workstations have been modified the registry key, you can remove the
command line some day later.

For more information, please refer to the following Microsoft Web sites:

Reg COMMAND
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-
us/reg.mspx

To assign computer startup scripts
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-
us/gptext_assigncomputerstartupscripts.mspx

Hope this helps! I am happy to be of assistance to you and look forward
to
hearing from you soon.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there
are
any updates in your thread. When responding to posts via your
newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly.
Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
Reply-To: "Buddy Greenshield" <gcsbend-at-bendcable-dot-com>
From: "Buddy Greenshield" <gcsbend-at-bendcable-dot-com>
References: <610CC4EA-8AAB-44DD-9BCE-6E916E245527@xxxxxxxxxxxxx>
<esYOVVtpGHA.4188@xxxxxxxxxxxxxxxxxxxx>
<C431F9F4-02EF-4F6D-A8ED-A768D7049956@xxxxxxxxxxxxx>
<Ogw7#KwpGHA.1600@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: Modify Registry on all SBS2003 clients
Date: Thu, 13 Jul 2006 23:18:46 -0700
Lines: 83
Organization: GCS
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
X-RFC2646: Format=Flowed; Response
Message-ID: <upESe1wpGHA.2256@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: bc183227.bendcable.com 216.228.183.227
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:281294
X-Tomcat-NG: microsoft.public.windows.server.sbs

I would do it with a simple script..

Get "reg.exe" from the windows 2000 resource kit.
Add the registry key to one machine - then export the key to a .reg
file
named registrykey.reg
copy reg.exe and the registrykey.reg file to a share on the server
create a tiny .bat file such as:

@echo off
net use v: \\ServerName\ShareName
v:
reg import registykey.reg >nul
c:
net use v: /d


name the .bat file fixreg.bat
At this point you might want to test the batch file on a system to make
sure
it works.

Call the batch file from a login script:

Copy fixreg.bat to the SYSVOL\scripts folder on your SBS server
Make a copy of SBS_LOGIN_SCRIPT.bat for safe keeping
Edit the SBS_LOGIN_SCRIPT.bat
Add the following line to the bottom of the script

Call %0\..\fixreg.bat

Next time the user logs on, the registry on their computer will be
fixed.
After each system has been logged onto, you can replace the modified
SBS_LOGIN_SCRIPT.bat with the original one.

Buddy G.

"kj" <kj@xxxxxxxxxxx> wrote in message
news:Ogw7%23KwpGHA.1600@xxxxxxxxxxxxxxxxxxxxxxx
Looks like a job for Desktop Standard Policy Maker Registry
Extension.
That's a mouthful, eh.
Fortunately the price is right.

http://www.desktopstandard.com/PolicyMakerRegistryExtension.aspx


--
/kj
"G. Uri" <GUri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C431F9F4-02EF-4F6D-A8ED-A768D7049956@xxxxxxxxxxxxxxxx
The full path is this, which has to be created:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control
\StorageDevicePolicies

then create Dword WriteProtect and set value to 1

Thanks

"kj" wrote:

Perhaps through group policy, you'd need to be more specific and
perhaps
more on topic in
microsoft.public.windows.group_policy.

But feel free to give it a shot here.

What's the full registry path key you need to create?
--
/kj
"G. Uri" <G. Uri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:610CC4EA-8AAB-44DD-9BCE-6E916E245527@xxxxxxxxxxxxxxxx
I need to add a key and set a Dword in the registry of all my
sbs2003
clients. Is there a way i can do this automatically from the
server
instead
of going to each client in the network.

Thanks














.

Relevant Pages

  • Re: Modify Registry on all SBS2003 clients
    ... registry setting to all workstations. ... command "REG ADD" to modify registry. ... the following command will change the registry value as your ... You may copy above command into the login script file SBS_LOGIN_SCRIPT.bat ...
    (microsoft.public.windows.server.sbs)
  • Re: Modify Registry on all SBS2003 clients
    ... logging on the client computer dont have administrative rights on the ... registry setting to all workstations. ... command "REG ADD" to modify registry. ... and put the command lines at the bottom of the script file. ...
    (microsoft.public.windows.server.sbs)
  • Re: Mapping drives and adding to the path
    ... Please be absolutely certain that the PATH registry key stay as ... You will need to run with the elevated privileges of the Group Policy login ... script instead of the logged-on user to make these modifications. ... Perhaps you can use the REG command to manipulate this key (belive this ...
    (microsoft.public.windows.server.scripting)
  • Re: Modify Registry on all SBS2003 clients
    ... but i have one question: Will the reg add comand work if the users ... logging on the client computer dont have administrative rights on the client ... registry setting to all workstations. ... You may copy above command into the login script file SBS_LOGIN_SCRIPT.bat ...
    (microsoft.public.windows.server.sbs)
  • Re: Registry Add Commands
    ... Console Registry Tool for Windows - version 3.0 ... it gives me the 'reg' is not recognized as an internal or ... >>> them into the .reg file, but they wouldn't load. ... >> in front of your commands at a command prompt. ...
    (microsoft.public.win2000.general)