Windows Server 2003 w/ XP Pro Clients - How to Push out a script file making a registry change ?

To the experts-

I have a registry change script, how do I push it out to all the clients easily ? Do I have to make it a .bat file or can I make it a .scr file ?

How does this work ?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dmitri FarafontovLinux Systems AdminCommented:
You will need to Configure a Logon script via Group Policy.
AD Users and Computers >> Your Domain Properties >> Group Policy >> Computer Settings >> Admin Templates
The best method depends upon what changes exactly you're trying to make. In HKCU or HKLM, in a policies tree, a one-time setting or something to be enforced continuously?
jnawrockiAuthor Commented:
I understand the process, which file format would be the best? I just want to make a one-time setting change.
Introduction to R

R is considered the predominant language for data scientist and statisticians. Learn how to use R for your own data science projects.

It's still important to know what it is you want to change. HKCU, HKLM, is the setting in a *\policies\* tree?
jnawrockiAuthor Commented:
It is an HKLM, in the WinLogon Tree, registry edit...
Create a list of workstations - call this file PCList.txt (PC Name only, don't use preceeding \\)

Now, run the following script: (you can clean up/remove the comments if you like, I just place them there so that you can follow the process).

@echo off
::  Batch file to add (your description) setting
::  across all remote systems contained
::  in text file PCList.txt

REM Adjust "PCList.txt" to include the full location of the file (C:\Data\PCList.txt)

:: Adjust REG ADD string below to contain the (/v) Value you want to change
:: and the (/d) Data you want reflected in that change.  (/f) will force it to be
:: overwritten - remove the /f if this is not desirable.

For /f %%a in (C:\PCList.txt) do REG ADD "\\%%a\HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon" /v MyStringValue /d "DataForThatStringValue" /f

::====end of code=======

You must have local administrative rights to each pc for this to work properly.
jnawrockiAuthor Commented:
Sirbounty -

can you make that code into a bat file format ?
CMD/Bat - same thing - just rename it to RegMod.Bat - no changes required...
jnawrockiAuthor Commented:
How if I just want to apply it through my GPO, can we take out the  computer list in the file ? Sorry, when it comes to scripting  I am a bit of an amateur..
Just run it from your workstation, or from the server.  It's not being applied via a GPO, it's remotely connecting to each machine's registry.  Depending on how many system you have it shouldn't take long to run - since it's a one-time process, this should be the easiest method for you.
jnawrockiAuthor Commented:
I would rather run it thru GPO..
Then export the key you want to apply.  I'll assume here you want to change the Legal text that appears when the user logs on...

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"LegalNoticeText"="Do not attempt to logon unless authorized.  Logon attempts are audited"

Now save this as Legal.Reg in \\ServerName\Sysvol\\scripts

Additionally, save Legal.bat in the same location containing the following line:

@regedit /s \\ServerName\Sysvol\\scripts\Legal.Reg

Now right-click the domain in ADU (Start->Run->Dsa.msc) and choose properties
From the Group Policy tab, Add or Edit an existing policy.
The policy you're looking for would be under User Config\Windows Settings\Scripts\Logon
Double click Logon and add Legal.Bat there...

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
just in case you indeed want to set the LegalNotice text, you don't need a script; you can do that with an existing security policy.
In the GP editor, you'll find it in Computer Configuration\Windows Configuration\Security Settings\Local Policies\Security Options, under "Interactive Logon ...".

Need your help.  You asked the following question in early January this year.

Solution Title: XP Pro Service Pack 2 slow network browsing via Office 2003

The Accepted Answer referred to a KB article that isn't available anymore.

Look In Box May Be Slow to Show All Available Resources;en-us;822621

Do you remember what you did to fix the problem?

I have a 500 point question on this:


It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.