Link to home
Start Free TrialLog in
Avatar of chiefcrazythumb
chiefcrazythumb

asked on

Group Policy "Extra Registry Settings"

I have a group policy that is showing extra registry settings.  I am using a Windows 2000 domain and my pc is Windows XP SP2.  I've seen on the web that this is a problem but I'm not sure how to fix it.  One of my major issues with this is I have 2 Windows 2003 Terminal Servers that are unable to run Windows Update.  If I use the Resultant Set of Policy I see where Windows update is disabled.  I just cannot figure out where to change to group policy.  I have ran the KB842933 update for my Windows 2000 Domain Controllers and that fixed the following error I was seeing "The following entry in the [strings] section is too long and has been truncated".  Again the problem is I cannot find where to change the Extra Registry settings.  Any help would be appreciated.

 
Avatar of oBdA
oBdA

That happens if you remove an .adm template from a GPO without first setting the policies defined in this template back to "Not configured".
You need to re-add the template that you used to define these settings to the GPO, set the policies back to "Not configured", then you can remove the template again.
Avatar of chiefcrazythumb

ASKER

I'm not sure which .adm template it was.  Any way to determine what template I need to download from MS.
Check which keys are mentioned in the "extra registry settings", and try to find out from which context they could come; it's your only point of reference left. Unfortunately, there's no list of "last templates used" like in Word ...
I tried adding the the windows XP .adm files and it doesn't show up under the Resultant Set of Policy anymore but it still doesn't show a setting in the Group Policy Manager.  Any other ideas?
In the View>Filter menu, make sure the box for "Only show policies that can be fully managed" is unchecked (and the box for "Only show configured policies" is checked, to make it easier).
Ok I just tried the filter setting but that didn't show me anything extra under the Resultant Set of Policy and it still doesn't show up under the GPO.
These are just view filter settings for the GP Editor, you won't notice anything different in the RSOP; when you now edit the GPO from which the "extra registry settings" were coming from, you should find some policies (either under Computer Configuration\Administrative Templates or User Configuration\Administrative Templates) that are set.
Below you can see a list of the policy

Computer Configuration (Enabled)hide
Administrative Templateshide
Systemshow
Policy Setting
Turn off Autoplay Enabled
Turn off Autoplay on: CD-ROM drives
 

System/Group Policyshow
Policy Setting
User Group Policy loopback processing mode Enabled
Mode: Merge
 

System/Internet Communication Management/Internet Communication settingsshow
Policy Setting
Turn off access to all Windows Update features Enabled
Turn off Automatic Root Certificates Update Enabled
Turn off Event Viewer "Events.asp" links Enabled
Turn off Help and Support Center "Did you know?" content Enabled
Turn off Help and Support Center Microsoft Knowledge Base search Enabled
Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com Enabled
Turn off Internet download for Web publishing and online ordering wizards Enabled
Turn off Internet File Association service Enabled
Turn off printing over HTTP Enabled
Turn off Registration if URL connection is referring to Microsoft.com Enabled
Turn off Search Companion content file updates Enabled
Turn off the "Order Prints" picture task Enabled
Turn off the "Publish to Web" task for files and folders Enabled
Turn off the Windows Messenger Customer Experience Improvement Program Enabled
Turn off Windows Error Reporting Enabled
Turn off Windows Movie Maker automatic codec downloads Enabled
Turn off Windows Movie Maker online Web links Enabled
Turn off Windows Movie Maker saving to online video hosting provider Enabled
Turn off Windows Update device driver searching Enabled

System/Logonshow
Policy Setting
Don't display the Getting Started welcome screen at logon Enabled

System/User Profilesshow
Policy Setting
Add the Administrators security group to roaming user profiles Enabled
Delete cached copies of roaming profiles Enabled

Windows Components/Internet Explorershow
Policy Setting
Disable Automatic Install of Internet Explorer components Enabled
Do not allow users to enable or disable add-ons Enabled

Windows Components/Terminal Servicesshow
Policy Setting
Set path for TS Roaming Profiles Enabled
Profile path \\serverl\profiles
Specify the path in the form, \\Computername\Sharename
 

Windows Components/Terminal Services/Clientshow
Policy Setting
Do not allow passwords to be saved Enabled

Windows Components/Terminal Services/Client/Server data redirectionshow
Policy Setting
Do not allow client printer redirection Disabled

Windows Components/Windows Media Digital Rights Managementshow
Policy Setting
Prevent Windows Media DRM Internet Access Enabled

Windows Components/Windows Messengershow
Policy Setting
Do not allow Windows Messenger to be run Enabled
Do not automatically start Windows Messenger initially Enabled

Extra Registry Settingshide
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.

Setting State
Software\Policies\Microsoft\Internet Explorer\New Windows\Allow\*.website*.website.com
Software\Policies\Microsoft\Internet Explorer\New Windows\ListBox_Support_Allow 1

User Configuration (Disabled)show
Administrative Templateshide
Control Panelshow
Policy Setting
Prohibit access to the Control Panel Enabled

Network/Network Connectionsshow
Policy Setting
Ability to change properties of an all user remote access connection Disabled
Ability to delete all user remote access connections Disabled
Ability to Enable/Disable a LAN connection Disabled
Ability to rename all user remote access connections Disabled
Ability to rename LAN connections Disabled
Ability to rename LAN connections or remote access connections available to all users Disabled
Enable Windows 2000 Network Connections settings for Administrators Enabled
Prohibit access to properties of a LAN connection Enabled
Prohibit access to properties of components of a LAN connection Enabled
Prohibit access to properties of components of a remote access connection Enabled
Prohibit access to the Advanced Settings item on the Advanced menu Enabled
Prohibit access to the New Connection Wizard Enabled
Prohibit access to the Remote Access Preferences item on the Advanced menu Enabled
Prohibit adding and removing components for a LAN or remote access connection Enabled
Prohibit changing properties of a private remote access connection Enabled
Prohibit connecting and disconnecting a remote access connection Enabled
Prohibit deletion of remote access connections Enabled
Prohibit Enabling/Disabling components of a LAN connection Enabled
Prohibit renaming private remote access connections Enabled
Prohibit TCP/IP advanced configuration Enabled
Prohibit viewing of status for an active connection Enabled
Turn off notifications when a connection has only limited or no connectivity Enabled

Systemshow
Policy Setting
Don't display the Getting Started welcome screen at logon Enabled
Prevent access to registry editing tools Enabled
Disable regedit from running silently? Yes
 
Policy Setting
Prevent access to the command prompt Enabled
Disable the command prompt script processing also? No
 

System/Ctrl+Alt+Del Optionsshow
Policy Setting
Remove Lock Computer Enabled
Remove Task Manager Enabled
These control the popup blocker of XP SP2 / W2k3 SP1. Can't check it at the moment, they might be in the inetres.adm file of an XP SP2 or W2k3 SP1 machine, or from a customized adm template.
Software\Policies\Microsoft\Internet Explorer\New Windows\Allow\*.website*.website.com
Software\Policies\Microsoft\Internet Explorer\New Windows\ListBox_Support_Allow 1
Ok but the one I'm really interested i now is the Windows update.  It is not showing up under extra reditry settings or Administrative Template/Windows Components.  But if I go and run Resultant Set of Policy it Shows up using this policy.
ASKER CERTIFIED SOLUTION
Avatar of chiefcrazythumb
chiefcrazythumb

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial