[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 367
  • Last Modified:

Can registry values be changed with Group Policies?

I've got a large number of PC's I need to push out some registry changes to. I'd like to be able to do this with Group Policies. I've gone through the GPE, and I haven't found what I'm looking for.

I found the following:

Open up active directory and browse to the group policy in question, In the group policy select computer configuration and then windows settings and then security settings.
Right click on the registry folder and select "Add Key", select the registry key that you want to use and follow the wizard through the rest.

This seems to only change the permissions of a registry key, not the value of the key itself (unless I'm missing something).
0
jfbrubaker1969
Asked:
jfbrubaker1969
  • 2
1 Solution
 
oBdACommented:
You can indeed change registry settings using a group policy (within certain limits, though).
What exactly are you trying to change?

Administrative Template File Format
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/policy/policy/administrative_template_file_format.asp

Implementing Registry-Based Group Policy
http://www.microsoft.com/WINDOWS2000/techinfo/howitworks/management/rbppaper.asp
0
 
jfbrubaker1969Author Commented:
One example would be that many of our salesmen work from home using remote desktop. A majority have multi function printers. By default, ports for multi function printers won't show in a remote desktop session. There is a registry setting that allows these ports to be shared:

http://support.microsoft.com/default.aspx?scid=kb;en-us;q302361

I have the laptops that I'd like to push this setting out to in an OU. I have no problems using GPE to assign software, etc... I just want to be able to push registry values out in the same way (if possible). I could do scripts, but I'd prefer to use GP if possible.
0
 
oBdACommented:
That should do the trick. Import it into the GP editor; since this is not a real group policy, you'll have to uncheck the filtering for viewing completely manageable policies only. Note that this setting will *not* simlpy "go away" if you set the policy to unconfigured (as it's outside of the ...\policies\... keys), so you'll have to disable it explicitly and reapply it to undo the change.

====8<----[ForcePortRedir.adm]----
CLASS USER

CATEGORY !!AdditionalSettings

  CATEGORY !!TerminalServices

    POLICY !!ForcePortRedir
    KEYNAME "Software\Microsoft\Terminal Server Client\Default\AddIns\RDPDR"
      VALUENAME "FilterQueueType"
      VALUEON NUMERIC 4294967295
      VALUEOFF DELETE
    END POLICY ; !!TerminalServices

  END CATEGORY ; !!ForcePortRedir

END CATEGORY ; !!AdditionalSettings

[strings]
AdditionalSettings=Additional Settings
TerminalServices=Terminal Services
ForcePortRedir=Force port redirection for all ports
====8<----[ForcePortRedir.adm]----
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now