Solved

How to edit registry entry using group policy

Posted on 2007-11-15
5
7,597 Views
Last Modified: 2010-10-08
I would like to automate the process of uninstalling Symantec Antivirus Client from about 40 Windows XP clients who are part of Windows Server 2003 domain and the only thing I am stuck at is how to edit registartion entry so that the uninstall process doesn't ask for admin password.
I can MANUALLY edit the registration entry "UseVPUninstallPassword" to 0 using regedit.
However, I am trying to use REGINI.exe to accomplish this :
Both regini and rp1.ini are in C:\Windows\System32
at command prompt when I run C:\> regini.exe rp1.ini  
The "UseVPUninstallPassword"= REG_DWORD 0x00000001 remains unchanged.
Here is rp.ini
-------------------------------------------------------------------
 rp1.ini
HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security "UseVPUninstallPassword"= REG_DWORD 0x00000000

I have also tried :
rp1.ini different style :
------------------------------------------------------------
\registry\machine
              SOFTWARE
                    INTEL
                       LANDesk
                           VirusProtect6
                                     CurrentVersion
                                                AdministratorOnly
                                                             Security
                                                                "UseVPUninstallPassword" = REG_DWORD 0x00000000
----------------------------------------------------
The resulting entry remains UNCHANGED and I want to automate the whole process.



 
0
Comment
Question by:mn210
5 Comments
 
LVL 32

Accepted Solution

by:
and235100 earned 63 total points
ID: 20293422
Can you run this from a batch file - with a reg add /f entry before it - so the registry value gets changed?

@echo off
reg add HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /v "UseVPUninstallPassword" /t reg_dword /d 0x00000000 /f


(all one line, of course)
0
 
LVL 29

Assisted Solution

by:matrixnz
matrixnz earned 62 total points
ID: 20296417
Hi mn210

You can create a custom ADM file, see attached, Save the file as SAVPUR.adm (or whatever you like, that stands for Symantec AntiVirus Password Uninstall Remover)
Using Group Policy Management Tool, add the template to your particular OU GPO, once you've done that you can navigate to Computer Configuration\Administrative Tools\Symantec AntiVirus and enable Symantec AV Uninstall Password and then check the Remove Symantec AV Uninstall Password Requirement

That's it, just remember to view this Group Policy you must modify "Filtering" remove check against "Only show policy settings that can be fully managed."

Hope that helps.

Cheers
CLASS MACHINE
 

CATEGORY "Symantec Antivirus"
 

  POLICY !!PolicyNoAdmin

  EXPLAIN !!ExplainNoAdmin

  KEYNAME 
 

"Software\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security"

    PART !!PartNoAdmin

    CHECKBOX

    VALUENAME "UseVPUninstallPassword"

    VALUEON NUMERIC 0

    VALUEOFF NUMERIC 1

    END PART

  END POLICY
 

END CATEGORY
 

[STRINGS]

PolicyNoAdmin=Symantec AV Uninstall Password

ExplainNoAdmin=Remove Symantec AV Uninstall Password Requirement

PartNoAdmin=Remove Symantec AV Uninstall Password Requirement

Open in new window

0
 
LVL 1

Expert Comment

by:Computer101
ID: 20649613
Forced accept.

Computer101
EE Admin
0
 

Expert Comment

by:Ehab_Nassar
ID: 26598903
I want to make it with script  like  i use add reg ... with paramter f
with adm template need some work to do admx
could anyone help me
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Being a system administrator some time we require to do things remotely, one of them is installing software. Here I am going to tell you how to install software through wmic (Windows management instrument console). I am not at all saying that this i…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now