Solved

Can registry values be changed with Group Policies?

Posted on 2004-08-31
3
362 Views
Last Modified: 2010-04-19
I've got a large number of PC's I need to push out some registry changes to. I'd like to be able to do this with Group Policies. I've gone through the GPE, and I haven't found what I'm looking for.

I found the following:

Open up active directory and browse to the group policy in question, In the group policy select computer configuration and then windows settings and then security settings.
Right click on the registry folder and select "Add Key", select the registry key that you want to use and follow the wizard through the rest.

This seems to only change the permissions of a registry key, not the value of the key itself (unless I'm missing something).
0
Comment
Question by:jfbrubaker1969
  • 2
3 Comments
 
LVL 84

Expert Comment

by:oBdA
ID: 11942976
You can indeed change registry settings using a group policy (within certain limits, though).
What exactly are you trying to change?

Administrative Template File Format
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/policy/policy/administrative_template_file_format.asp

Implementing Registry-Based Group Policy
http://www.microsoft.com/WINDOWS2000/techinfo/howitworks/management/rbppaper.asp
0
 

Author Comment

by:jfbrubaker1969
ID: 11943163
One example would be that many of our salesmen work from home using remote desktop. A majority have multi function printers. By default, ports for multi function printers won't show in a remote desktop session. There is a registry setting that allows these ports to be shared:

http://support.microsoft.com/default.aspx?scid=kb;en-us;q302361

I have the laptops that I'd like to push this setting out to in an OU. I have no problems using GPE to assign software, etc... I just want to be able to push registry values out in the same way (if possible). I could do scripts, but I'd prefer to use GP if possible.
0
 
LVL 84

Accepted Solution

by:
oBdA earned 500 total points
ID: 11944660
That should do the trick. Import it into the GP editor; since this is not a real group policy, you'll have to uncheck the filtering for viewing completely manageable policies only. Note that this setting will *not* simlpy "go away" if you set the policy to unconfigured (as it's outside of the ...\policies\... keys), so you'll have to disable it explicitly and reapply it to undo the change.

====8<----[ForcePortRedir.adm]----
CLASS USER

CATEGORY !!AdditionalSettings

  CATEGORY !!TerminalServices

    POLICY !!ForcePortRedir
    KEYNAME "Software\Microsoft\Terminal Server Client\Default\AddIns\RDPDR"
      VALUENAME "FilterQueueType"
      VALUEON NUMERIC 4294967295
      VALUEOFF DELETE
    END POLICY ; !!TerminalServices

  END CATEGORY ; !!ForcePortRedir

END CATEGORY ; !!AdditionalSettings

[strings]
AdditionalSettings=Additional Settings
TerminalServices=Terminal Services
ForcePortRedir=Force port redirection for all ports
====8<----[ForcePortRedir.adm]----
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
removing Exchange from an old windows 2003 DC 8 64
Best practices power settings GPO Win 10 4 121
shadow copies 7 86
2003 Server DNS/FS errors 6 72
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Learn about cloud computing and its benefits for small business owners.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question