Re: Modify Registry on all SBS2003 clients

Hi G. Uri,

Thanks for your update. Also thanks for KJ and Buddy's input.

I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

As KJ said, to modify the registry keys and sub-keys of
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\, it requires modify
permissions to these registry keys.

Since the registry keys you need modify are the sub-keys of the
HKEY_LOCAL_MACHINE, you can assign the "reg add" command lines as the
computer startup script so that the script can be run under the Local
System account. In this way, it doesn't require the current user account
has administrator permissions to the computer. To do this:

1. Locate the Default Domain policy in Group policy management console, and
right click it to choose Edit item.

2. Store the batch file into the following folder on the DC:
%WinDir%\SYSVOL\sysvol\yourdomainname\Policies\{31B2F340-016D-11D2-945F-00C0
4FB984F9}\Machine\Scripts\Startup.

3. In Group policy object editor, navigate the node: Computer
Configuration --> Windows Settings --> Scripts (Startup/Shutdown) --> right
click Startup and select Properties --> In properties I selected add. In
the Add a Script screen, you can input the path for the batch file to
finish the process.

4. Reboot a client computer after above change, and test this issue. You
may also run RSOP.MSC on XP system to check whether the script is loaded as
expected.

You can check the following article to get detail steps to assign computer
startup scripts:

To assign computer startup scripts
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-
us/gptext_assigncomputerstartupscripts.mspx

Please let me know if you have further question on the issue. I am glad to
be assistance to you.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
From: "kj" <kj@xxxxxxxxxxx>
References: <610CC4EA-8AAB-44DD-9BCE-6E916E245527@xxxxxxxxxxxxx>
<esYOVVtpGHA.4188@xxxxxxxxxxxxxxxxxxxx>
<C431F9F4-02EF-4F6D-A8ED-A768D7049956@xxxxxxxxxxxxx>
<Ogw7#KwpGHA.1600@xxxxxxxxxxxxxxxxxxxx>
<upESe1wpGHA.2256@xxxxxxxxxxxxxxxxxxxx>
<MtWFo8xpGHA.2024@xxxxxxxxxxxxxxxxxxxxx>
<9D22D2DC-0DC8-4621-A160-A4FCB7050176@xxxxxxxxxxxxx>
<eEWUUIMqGHA.2464@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: Modify Registry on all SBS2003 clients
Date: Sun, 16 Jul 2006 13:37:43 -0700
Lines: 239
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
X-RFC2646: Format=Flowed; Response
Message-ID: <eCERyeRqGHA.516@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: ip68-2-173-248.ph.ph.cox.net 68.2.173.248
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:281761
X-Tomcat-NG: microsoft.public.windows.server.sbs

Only administrators, system, and creator/owner have greater than read
permissions on the subkeys of
hklm\system\currentcontrolset\control. (by default)

If your users are admins on their box then it should work. Otherwise take
another look at the group policy add in I mentioned earlier. It'll will
give
you much greater control and flexability with this and other registry
settings going forward.



--
/kj
"Buddy Greenshield" <gcsbend-at-bendcable-dot-com> wrote in message
news:eEWUUIMqGHA.2464@xxxxxxxxxxxxxxxxxxxxxxx
It should, but you would need to test it for sure.

Buddy G.

"G. Uri" <GUri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9D22D2DC-0DC8-4621-A160-A4FCB7050176@xxxxxxxxxxxxxxxx
Thanks, but i have one question: Will the reg add comand work if the
users
logging on the client computer dont have administrative rights on the
client
computers?

""Jenny wu [MSFT]"" wrote:

Hi G. Uri,

Thanks for using the SBS newsgroup. Many thanks for KJ and Buddy's
input.

From your description, I understand that you want to know how to
deploy
a
registry setting to all workstations. If I am off base, please don't
hesitate to let me know.

Buddy's solution is perfect. You can try to test it.

Also please let me know if all workstations in the SBS 2003 domain are
running Windows XP or later. If yes, we can also use the XP built-in
command "REG ADD" to modify registry.

For example, the following command will change the registry value as
your
description:

reg add

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\StorageDevicePolicies/
v WriteProtect /t Dword /d "1" /f

HINT: For more information regarding the "Reg Add" command-line
switches,
please run "Reg Add /?".

You may copy above command into the login script file
SBS_LOGIN_SCRIPT.bat
and put the command lines at the bottom of the script file. So, when
the
workstations reboot next time, the Login Script will be executed
automatically to modify the registry value. After you ensure all
workstations have been modified the registry key, you can remove the
command line some day later.

For more information, please refer to the following Microsoft Web
sites:

Reg COMMAND

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-
us/reg.mspx

To assign computer startup scripts

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-
us/gptext_assigncomputerstartupscripts.mspx

Hope this helps! I am happy to be of assistance to you and look
forward
to
hearing from you soon.

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you
check
the
"Notify me of replies" box to receive e-mail notifications when there
are
any updates in your thread. When responding to posts via your
newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly.
Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
Reply-To: "Buddy Greenshield" <gcsbend-at-bendcable-dot-com>
From: "Buddy Greenshield" <gcsbend-at-bendcable-dot-com>
References: <610CC4EA-8AAB-44DD-9BCE-6E916E245527@xxxxxxxxxxxxx>
<esYOVVtpGHA.4188@xxxxxxxxxxxxxxxxxxxx>
<C431F9F4-02EF-4F6D-A8ED-A768D7049956@xxxxxxxxxxxxx>
<Ogw7#KwpGHA.1600@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: Modify Registry on all SBS2003 clients
Date: Thu, 13 Jul 2006 23:18:46 -0700
Lines: 83
Organization: GCS
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
X-RFC2646: Format=Flowed; Response
Message-ID: <upESe1wpGHA.2256@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: bc183227.bendcable.com 216.228.183.227
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:281294
X-Tomcat-NG: microsoft.public.windows.server.sbs

I would do it with a simple script..

Get "reg.exe" from the windows 2000 resource kit.
Add the registry key to one machine - then export the key to a .reg
file
named registrykey.reg
copy reg.exe and the registrykey.reg file to a share on the server
create a tiny .bat file such as:

@echo off
net use v: \\ServerName\ShareName
v:
reg import registykey.reg >nul
c:
net use v: /d


name the .bat file fixreg.bat
At this point you might want to test the batch file on a system to
make
sure
it works.

Call the batch file from a login script:

Copy fixreg.bat to the SYSVOL\scripts folder on your SBS server
Make a copy of SBS_LOGIN_SCRIPT.bat for safe keeping
Edit the SBS_LOGIN_SCRIPT.bat
Add the following line to the bottom of the script

Call %0\..\fixreg.bat

Next time the user logs on, the registry on their computer will be
fixed.
After each system has been logged onto, you can replace the modified
SBS_LOGIN_SCRIPT.bat with the original one.

Buddy G.

"kj" <kj@xxxxxxxxxxx> wrote in message
news:Ogw7%23KwpGHA.1600@xxxxxxxxxxxxxxxxxxxxxxx
Looks like a job for Desktop Standard Policy Maker Registry
Extension.
That's a mouthful, eh.
Fortunately the price is right.

http://www.desktopstandard.com/PolicyMakerRegistryExtension.aspx


--
/kj
"G. Uri" <GUri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C431F9F4-02EF-4F6D-A8ED-A768D7049956@xxxxxxxxxxxxxxxx
The full path is this, which has to be created:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control
\StorageDevicePolicies

then create Dword WriteProtect and set value to 1

Thanks

"kj" wrote:

Perhaps through group policy, you'd need to be more specific and
perhaps
more on topic in
microsoft.public.windows.group_policy.

But feel free to give it a shot here.

What's the full registry path key you need to create?
--
/kj
"G. Uri" <G. Uri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:610CC4EA-8AAB-44DD-9BCE-6E916E245527@xxxxxxxxxxxxxxxx
I need to add a key and set a Dword in the registry of all my
sbs2003
clients. Is there a way i can do this automatically from the
server
instead
of going to each client in the network.

Thanks
















.

Relevant Pages

  • Re: SBS 2003, lost companyweb
    ... The original Windows SBS installation was preinstalled by an OEM. ... Start Registry Editor, and then expand HKEY_LOCAL_MACHINE. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Syncing fax server with company web
    ... I followed the steps in your last post but found that the registry tree was ... the right track adding the Publish key to the current Email, Folder, Printing ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: WINS Cannot read from the UDP socket
    ... registry entry to 0x0FFFFFFF. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: VSS Errors in Event Log
    ... Microsoft Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... |>> Restart the server and check if the issue persists. ... Delete all the keys found in registry. ...
    (microsoft.public.windows.server.sbs)
  • RE: RWW Menu - No companyweb option
    ... > From your description, it seems the registry key is correct, but you still ... if you can view the companyweb via ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)