?
Solved

Edit HKEY_CURRENT_USER Registry key with a Group Policy Object

Posted on 2006-05-19
8
Medium Priority
?
5,178 Views
Last Modified: 2008-01-09
I have been struggling with this for a bit now and am nearly fed up. This is what I would like to accomplish.

1. Modify a setting in IE6--> Tools/Internet Options/Advanced/Print background colors and images. By default this option is not checked.
       a. Registry Key= HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main   valuename = Print_Background  which I would like to be set to "yes"
2. Deploy this via GPO as a custom .ADM to the entire domain.

This is what I have been able to come up with so far

CLASS USER

CATEGORY "Custom"
KEYNAME "Software\Microsoft\Internet Explorer\Main"

 POLICY "Print_Background"
  PART "Print_Background"
  EDITTEXT
  DEFAULT "yes"
  VALUENAME "Print_Background"
  END PART
 END POLICY

END CATEGORY


When I import this adm file into the Default domain Policy under "User Configuration/Administrative Templates" it seems to import without error. I modify the view/filtering settings by unchecking "Only show policy settings that can be fully managed"   I navigate to the catagory "Custom" double click on the setting Print_Background in the right hand pane and select enable and click OK. Nothing happens the setting is not applied to the Users in the domain. What am I doing wrong?

David
0
Comment
Question by:samscs01
  • 4
  • 4
8 Comments
 
LVL 7

Expert Comment

by:Isigow
ID: 16720510
Have you seen this article? You havent mentioned which OS your using and it says XPSP2
http://support.microsoft.com/default.aspx?scid=kb;en-us;904710

Also, this is an example of the ADM's I've made before, may want to try it and see how it works. However I see no error in your code. However I dont use the Editable text option, I tend to just set both options as a choice of enable of disable as seen below.

Isi

CLASS USER

CATEGORY !!usersetting
CATEGORY !!InternetExplorer
KEYNAME "Software\Microsoft\Internet Explorer\Main"
POLICY !!DebugPolicy
EXPLAIN !!explainDebug
VALUENAME "Disable Script Debugger"
VALUEON "yes"
VALUEOFF "no"
END POLICY
END CATEGORY
END CATEGORY

[strings]
machinesetting="Custom Machine Settings"
usersetting="Custom User Settings"
InternetExplorer=Internet Explorer
explainDebug="This policy will disable script debugging for a user."
DebugPolicy="Disable Script Debugging"
0
 

Author Comment

by:samscs01
ID: 16720598
Isi,

    The server is Windows Server 2003 the Cilents are WindowsXP service pack 2.  Also The [strings] section what is this used for?
0
 

Author Comment

by:samscs01
ID: 16720709
Also..  Valueon represents Enabled and Value off represents Disabled.. Is this true?
0
Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

 
LVL 7

Expert Comment

by:Isigow
ID: 16720741
strings is just variables, you can then use the !!<variable name> on lots of hand-made ADM's to use the same information.
the !! is the variable call.
Definately look into altering your adm first, if that doesnt work the hotfix may not be applicable because your not calling that key they mention. (HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings)  

Also, try running rsop.msc on a client to see if it is receiving the correct registry information (should be listed under either the custom section you created, or an additional area called something like 'Additional Registry Settings'

You did verify the key is not on a client correctly by checking it registry?
Did you try RSOP.msc at all to see if their was an error reported on the client side? (should be like a red X over a section if their is an error)

isi
0
 
LVL 7

Expert Comment

by:Isigow
ID: 16720748
Yes VALUEON and VALUEOFF are just the selections of ENABLED and DISABLED
0
 

Author Comment

by:samscs01
ID: 16720821
Isi,

   As you suggested I have double check to see if the regisrty information is getting to the client. It is not. I have also run rsop.msc on a client workstation without error.

Also, I have since modified the adm file as you suggested.

CLASS USER

CATEGORY "Custom"
KEYNAME "Software\Microsoft\Internet Explorer\Main"

 POLICY "Print_Background"
  VALUENAME "Print_Background"
  VALUEON "yes"
  VALUEOFF "no"
 END POLICY

END CATEGORY

0
 
LVL 7

Accepted Solution

by:
Isigow earned 1000 total points
ID: 16722835
So the custom adm is added to the policy with the changes, rebooted or gpupdate'd and still no luck?

Add this custom adm to an independant group policy (call it test policy or something) and add that to your user's OU. Then refresh the policy on the machine by rebooting or gpupdate /force.
then run a gpresult and ensure that the policy is indeed applying to the computer.

Let me know the result
Isi
0
 

Author Comment

by:samscs01
ID: 16735095
Thats has done it.  What is the the deal with this crazy thing? could it be that the Default domain policy has a conflicting setting? Well I don't care as long as it works. Thanks for all your help Isi.

David
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Nslookup is a command line driven utility supplied as part of most Windows operating systems that can reveal information related to domain names and the Internet Protocol (IP) addresses associated with them. In simple terms, it is a tool that can …
Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question