Deplying registry updates via GPO issue.
Hello,
We have a Windows environment with Vista client machines, I need to push out an update to the users via GPO for some new registry changes.
However the issue I am running into is..
Settings for registry updates in HKEY_LOCAL_MACHINE are under Computer Configuration, and settings for HKEY_CURRENT_USER are under User Configuration..
I need to deliver an update/create a registry in HKEY_CLASSES_ROOT, which are not in either of those scopes.
Am I still able to do this with the GPO?
I guess my other alternative is to deliver it using our existing Logon script that does a lot, put in a code-block for the registry but I would prefer to do this over GPO.
Any ideas/help?
Fyi: I have tried to enter it in Computer Configuration, and then running a gpupdate /force on my client PC, but no new registry keys are created once I check regedit. The GPO is set to be applied to "Authenticated Users" in our Domain and it is applied to the OU that my PC is under.
Thank you.
We have a Windows environment with Vista client machines, I need to push out an update to the users via GPO for some new registry changes.
However the issue I am running into is..
Settings for registry updates in HKEY_LOCAL_MACHINE are under Computer Configuration, and settings for HKEY_CURRENT_USER are under User Configuration..
I need to deliver an update/create a registry in HKEY_CLASSES_ROOT, which are not in either of those scopes.
Am I still able to do this with the GPO?
I guess my other alternative is to deliver it using our existing Logon script that does a lot, put in a code-block for the registry but I would prefer to do this over GPO.
Any ideas/help?
Fyi: I have tried to enter it in Computer Configuration, and then running a gpupdate /force on my client PC, but no new registry keys are created once I check regedit. The GPO is set to be applied to "Authenticated Users" in our Domain and it is applied to the OU that my PC is under.
Thank you.
Preferences
Windows Settings
Registry
Registry item: command
General
Action Replace
Properties Hive HKEY_CLASSES_ROOT
Key path optimo\shell\open\command
Value name (Default)
Value type REG_SZ
Value data C:\Program Files\Optimo\Optimo.exe %1
Common
Options Stop processing items on this extension if an error occurs on this item Yes
Remove this item when it is no longer applied No
Apply once and do not reapply No
Registry item: DefaultIcon
General
Action Create
PropertiesHive HKEY_CLASSES_ROOT
Key path optimo\DefaultIcon
Value name (Default)
Value type REG_SZ
Value data Optimo.exe
Common
Options Stop processing items on this extension if an error occurs on this item Yes
Remove this item when it is no longer applied No
Apply once and do not reapply No
Registry item: optimo
General
Action Create
PropertiesHive HKEY_CLASSES_ROOT
Key path optimo
Value name (Default)
Value type REG_SZ
Value data URL:Note Protocol
Commonhide
Options Stop processing items on this extension if an error occurs on this item Yes
Remove this item when it is no longer applied No
Apply once and do not reapply No
Registry item: URL Protocol
General
Action Create
Properties Hive HKEY_CLASSES_ROOT
Key path optimo
Value name URL Protocol
Value type REG_SZ
Value data
Common
Options Stop processing items on this extension if an error occurs on this item Yes
Remove this item when it is no longer applied No
Apply once and do not reapply No
Hi,
Why do you need to create the registry on the ROOT KEY section?
As I can understand from your registry edition, you are installing an application and set it up maybe for web access right? Nevertheless, you can set this edition or changes on the computers via GPO setting this registry edition via logon script, however, you must grant users the right to edit registry, or else you might need to logon to this computer yourself.
If you could explain a little better what you need I can try and help you with this by an alternate solution.
Rgds.
Why do you need to create the registry on the ROOT KEY section?
As I can understand from your registry edition, you are installing an application and set it up maybe for web access right? Nevertheless, you can set this edition or changes on the computers via GPO setting this registry edition via logon script, however, you must grant users the right to edit registry, or else you might need to logon to this computer yourself.
If you could explain a little better what you need I can try and help you with this by an alternate solution.
Rgds.
ASKER
I have checked the link that amichaell provided, and followed the guide to insert the key changes into HKEY_Current_User\Software
I have attached a code snippet of the XML export of the registry and i am still unable to see the changes in effect. I have re-logged and forced an update using gpupdate /force.
Is there a way to see a log of registry updates when you do a gpupdate /force? To see if there are any errors or information as to why this is not getting across?
The GPO is configured to be applied to Authenticated Users, for the AD Organizational Unit that my computer resides in.
This same gp policy has other updates that do work on end user PCs, but for some reason the registry part is not being updated on end PCs?
Any idea? My last option is to push this using our logon script.
I have attached a code snippet of the XML export of the registry and i am still unable to see the changes in effect. I have re-logged and forced an update using gpupdate /force.
Is there a way to see a log of registry updates when you do a gpupdate /force? To see if there are any errors or information as to why this is not getting across?
The GPO is configured to be applied to Authenticated Users, for the AD Organizational Unit that my computer resides in.
This same gp policy has other updates that do work on end user PCs, but for some reason the registry part is not being updated on end PCs?
Any idea? My last option is to push this using our logon script.
- <RegistrySettings clsid="{A3CCFC41-DFDB-43a5-8D26-0FE8B954DA51}">
- <Registry clsid="{9CD4B2F4-923D-47f5-A062-E897DD1DAD50}" name="command" status="(Default)" image="7" changed="2009-06-09 16:47:21" uid="{83219C83-2ED9-4385-A02D-52E2FA2A0D01}" userContext="1" bypassErrors="0">
<Properties action="U" displayDecimal="1" default="1" hive="HKEY_CURRENT_USER" key="Software\Classes\optimo\shell\open\command" name="" type="REG_SZ" value="C:\Program Files\Optimo\Optimo.exe %1" />
</Registry>
- <Registry clsid="{9CD4B2F4-923D-47f5-A062-E897DD1DAD50}" name="DefaultIcon" status="(Default)" image="7" changed="2009-06-09 16:47:27" uid="{64D5FA17-ADBA-4777-88AD-C135BEE39EC7}" userContext="1" bypassErrors="0">
<Properties action="U" displayDecimal="1" default="1" hive="HKEY_CURRENT_USER" key="Software\Classes\optimo\DefaultIcon" name="" type="REG_SZ" value="C:\Program Files\Optimo\Optimo.exe" />
</Registry>
- <Registry clsid="{9CD4B2F4-923D-47f5-A062-E897DD1DAD50}" name="optimo" status="(Default)" image="7" changed="2009-06-09 16:47:36" uid="{B9FC1A2C-673D-4649-AB5A-A06D0C35B058}" userContext="1" bypassErrors="0">
<Properties action="U" displayDecimal="1" default="1" hive="HKEY_CURRENT_USER" key="Software\Classes\optimo" name="" type="REG_SZ" value="URL:Optimo Protocol" />
</Registry>
- <Registry clsid="{9CD4B2F4-923D-47f5-A062-E897DD1DAD50}" name="URL Protocol" status="URL Protocol" image="7" changed="2009-06-09 16:47:32" uid="{8B80F990-740D-46F6-BD15-A33877E04D76}" userContext="1" bypassErrors="0">
<Properties action="U" displayDecimal="1" default="0" hive="HKEY_CURRENT_USER" key="Software\Classes" name="URL Protocol" type="REG_SZ" value="" />
</Registry>
</RegistrySettings>
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
We have decided to insert the update through our log-on script that runs every time a user logs into Windows. This will ensure that the keys are there.
Thanks for your help.
Thanks for your help.
http://www.insidetheregistry.com/regdatabase/browse.asp?keyid=4