Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Can registry values be changed with Group Policies?

Posted on 2004-08-31
3
Medium Priority
?
365 Views
Last Modified: 2010-04-19
I've got a large number of PC's I need to push out some registry changes to. I'd like to be able to do this with Group Policies. I've gone through the GPE, and I haven't found what I'm looking for.

I found the following:

Open up active directory and browse to the group policy in question, In the group policy select computer configuration and then windows settings and then security settings.
Right click on the registry folder and select "Add Key", select the registry key that you want to use and follow the wizard through the rest.

This seems to only change the permissions of a registry key, not the value of the key itself (unless I'm missing something).
0
Comment
Question by:jfbrubaker1969
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 85

Expert Comment

by:oBdA
ID: 11942976
You can indeed change registry settings using a group policy (within certain limits, though).
What exactly are you trying to change?

Administrative Template File Format
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/policy/policy/administrative_template_file_format.asp

Implementing Registry-Based Group Policy
http://www.microsoft.com/WINDOWS2000/techinfo/howitworks/management/rbppaper.asp
0
 

Author Comment

by:jfbrubaker1969
ID: 11943163
One example would be that many of our salesmen work from home using remote desktop. A majority have multi function printers. By default, ports for multi function printers won't show in a remote desktop session. There is a registry setting that allows these ports to be shared:

http://support.microsoft.com/default.aspx?scid=kb;en-us;q302361

I have the laptops that I'd like to push this setting out to in an OU. I have no problems using GPE to assign software, etc... I just want to be able to push registry values out in the same way (if possible). I could do scripts, but I'd prefer to use GP if possible.
0
 
LVL 85

Accepted Solution

by:
oBdA earned 2000 total points
ID: 11944660
That should do the trick. Import it into the GP editor; since this is not a real group policy, you'll have to uncheck the filtering for viewing completely manageable policies only. Note that this setting will *not* simlpy "go away" if you set the policy to unconfigured (as it's outside of the ...\policies\... keys), so you'll have to disable it explicitly and reapply it to undo the change.

====8<----[ForcePortRedir.adm]----
CLASS USER

CATEGORY !!AdditionalSettings

  CATEGORY !!TerminalServices

    POLICY !!ForcePortRedir
    KEYNAME "Software\Microsoft\Terminal Server Client\Default\AddIns\RDPDR"
      VALUENAME "FilterQueueType"
      VALUEON NUMERIC 4294967295
      VALUEOFF DELETE
    END POLICY ; !!TerminalServices

  END CATEGORY ; !!ForcePortRedir

END CATEGORY ; !!AdditionalSettings

[strings]
AdditionalSettings=Additional Settings
TerminalServices=Terminal Services
ForcePortRedir=Force port redirection for all ports
====8<----[ForcePortRedir.adm]----
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question