Edit HKEY_CURRENT_USER Registry key with a Group Policy Object

I have been struggling with this for a bit now and am nearly fed up. This is what I would like to accomplish.

1. Modify a setting in IE6--> Tools/Internet Options/Advanced/Print background colors and images. By default this option is not checked.
       a. Registry Key= HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main   valuename = Print_Background  which I would like to be set to "yes"
2. Deploy this via GPO as a custom .ADM to the entire domain.

This is what I have been able to come up with so far

CLASS USER

CATEGORY "Custom"
KEYNAME "Software\Microsoft\Internet Explorer\Main"

 POLICY "Print_Background"
  PART "Print_Background"
  EDITTEXT
  DEFAULT "yes"
  VALUENAME "Print_Background"
  END PART
 END POLICY

END CATEGORY


When I import this adm file into the Default domain Policy under "User Configuration/Administrative Templates" it seems to import without error. I modify the view/filtering settings by unchecking "Only show policy settings that can be fully managed"   I navigate to the catagory "Custom" double click on the setting Print_Background in the right hand pane and select enable and click OK. Nothing happens the setting is not applied to the Users in the domain. What am I doing wrong?

David
samscs01Asked:
Who is Participating?
 
IsigowCommented:
So the custom adm is added to the policy with the changes, rebooted or gpupdate'd and still no luck?

Add this custom adm to an independant group policy (call it test policy or something) and add that to your user's OU. Then refresh the policy on the machine by rebooting or gpupdate /force.
then run a gpresult and ensure that the policy is indeed applying to the computer.

Let me know the result
Isi
0
 
IsigowCommented:
Have you seen this article? You havent mentioned which OS your using and it says XPSP2
http://support.microsoft.com/default.aspx?scid=kb;en-us;904710

Also, this is an example of the ADM's I've made before, may want to try it and see how it works. However I see no error in your code. However I dont use the Editable text option, I tend to just set both options as a choice of enable of disable as seen below.

Isi

CLASS USER

CATEGORY !!usersetting
CATEGORY !!InternetExplorer
KEYNAME "Software\Microsoft\Internet Explorer\Main"
POLICY !!DebugPolicy
EXPLAIN !!explainDebug
VALUENAME "Disable Script Debugger"
VALUEON "yes"
VALUEOFF "no"
END POLICY
END CATEGORY
END CATEGORY

[strings]
machinesetting="Custom Machine Settings"
usersetting="Custom User Settings"
InternetExplorer=Internet Explorer
explainDebug="This policy will disable script debugging for a user."
DebugPolicy="Disable Script Debugging"
0
 
samscs01Author Commented:
Isi,

    The server is Windows Server 2003 the Cilents are WindowsXP service pack 2.  Also The [strings] section what is this used for?
0
Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

 
samscs01Author Commented:
Also..  Valueon represents Enabled and Value off represents Disabled.. Is this true?
0
 
IsigowCommented:
strings is just variables, you can then use the !!<variable name> on lots of hand-made ADM's to use the same information.
the !! is the variable call.
Definately look into altering your adm first, if that doesnt work the hotfix may not be applicable because your not calling that key they mention. (HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings)  

Also, try running rsop.msc on a client to see if it is receiving the correct registry information (should be listed under either the custom section you created, or an additional area called something like 'Additional Registry Settings'

You did verify the key is not on a client correctly by checking it registry?
Did you try RSOP.msc at all to see if their was an error reported on the client side? (should be like a red X over a section if their is an error)

isi
0
 
IsigowCommented:
Yes VALUEON and VALUEOFF are just the selections of ENABLED and DISABLED
0
 
samscs01Author Commented:
Isi,

   As you suggested I have double check to see if the regisrty information is getting to the client. It is not. I have also run rsop.msc on a client workstation without error.

Also, I have since modified the adm file as you suggested.

CLASS USER

CATEGORY "Custom"
KEYNAME "Software\Microsoft\Internet Explorer\Main"

 POLICY "Print_Background"
  VALUENAME "Print_Background"
  VALUEON "yes"
  VALUEOFF "no"
 END POLICY

END CATEGORY

0
 
samscs01Author Commented:
Thats has done it.  What is the the deal with this crazy thing? could it be that the Default domain policy has a conflicting setting? Well I don't care as long as it works. Thanks for all your help Isi.

David
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.