Creating Group Policy Options

Posted on 2005-04-06
Last Modified: 2010-04-18

How do I create new options for reg hacks to be applied by active directory group policies?

Question by:Norman_SK
    LVL 70

    Accepted Solution

    Hi Norman,

    Hopefully this is roughly what you're looking for. A few notes first.

    Unless the registry value has been documented as supported then the policy you are creating is not Fully Managed.

    That means that if a policy has been enabled setting it back to Not Configured will not remove or change the Registry setting from the client. Instead you would have to reverse the policy (generally by setting it to Disabled).

    By default policies that aren't Fully Managed are not displayed. To make them visible select the Administrative Templates Folder, then View and Filtering. Remove the tick from "Only show policy settings that can be fully managed".

    The basic template is:

    ; Selects the Registry Hive. USER for HKey_Current_User, Machine for HKey_Local_Machine

    CATEGORY "Category Name"
    ; This is the Folder you'd like the policy to appear under. Category statements can be nested

        POLICY "Example Policy"
        ; The Policy Name

            KEYNAME "Software\Policies"
            ; The Registry Key Name as it appears under User or Machine

            VALUENAME "Test"
            ; The Name of the Registry value you'd like to alter

            VALUEON NUMERIC 1
            VALUEOFF NUMERIC 0
            ; These are the simplist options - With the Policy Enabled the Registry value is set to 1
            ; With Disabled it is set to 0

        END POLICY
        ; Each policy must have an end statement

    ; Each Category must have an end statement

    This section of the MS Site has more detail on this:


    LVL 25

    Assisted Solution

    are asking how to edit the registry of client machines via a GPO?

    if that is the case you can just do it with simple login or startup script
    LVL 74

    Assisted Solution

    by:Jeffrey Kane - TechSoEasy
    You can modify ANY registry setting with a GPO, and obviously the reason to do so is to keep all of your settings within an OU so you don't have to modify things all over the place.

    To do so, just add whatever key you like to Computer Configuration > Windows Settings > Security Settings > Registry and it'll be written to the registry upon login.

    Good Luck!

    Jeff @

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
    This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now