Solved

How to edit registry entry using group policy

Posted on 2007-11-15
5
7,606 Views
Last Modified: 2010-10-08
I would like to automate the process of uninstalling Symantec Antivirus Client from about 40 Windows XP clients who are part of Windows Server 2003 domain and the only thing I am stuck at is how to edit registartion entry so that the uninstall process doesn't ask for admin password.
I can MANUALLY edit the registration entry "UseVPUninstallPassword" to 0 using regedit.
However, I am trying to use REGINI.exe to accomplish this :
Both regini and rp1.ini are in C:\Windows\System32
at command prompt when I run C:\> regini.exe rp1.ini  
The "UseVPUninstallPassword"= REG_DWORD 0x00000001 remains unchanged.
Here is rp.ini
-------------------------------------------------------------------
 rp1.ini
HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security "UseVPUninstallPassword"= REG_DWORD 0x00000000

I have also tried :
rp1.ini different style :
------------------------------------------------------------
\registry\machine
              SOFTWARE
                    INTEL
                       LANDesk
                           VirusProtect6
                                     CurrentVersion
                                                AdministratorOnly
                                                             Security
                                                                "UseVPUninstallPassword" = REG_DWORD 0x00000000
----------------------------------------------------
The resulting entry remains UNCHANGED and I want to automate the whole process.



 
0
Comment
Question by:mn210
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 32

Accepted Solution

by:
and235100 earned 63 total points
ID: 20293422
Can you run this from a batch file - with a reg add /f entry before it - so the registry value gets changed?

@echo off
reg add HKLM\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security /v "UseVPUninstallPassword" /t reg_dword /d 0x00000000 /f


(all one line, of course)
0
 
LVL 29

Assisted Solution

by:matrixnz
matrixnz earned 62 total points
ID: 20296417
Hi mn210

You can create a custom ADM file, see attached, Save the file as SAVPUR.adm (or whatever you like, that stands for Symantec AntiVirus Password Uninstall Remover)
Using Group Policy Management Tool, add the template to your particular OU GPO, once you've done that you can navigate to Computer Configuration\Administrative Tools\Symantec AntiVirus and enable Symantec AV Uninstall Password and then check the Remove Symantec AV Uninstall Password Requirement

That's it, just remember to view this Group Policy you must modify "Filtering" remove check against "Only show policy settings that can be fully managed."

Hope that helps.

Cheers
CLASS MACHINE
 
CATEGORY "Symantec Antivirus"
 
  POLICY !!PolicyNoAdmin
  EXPLAIN !!ExplainNoAdmin
  KEYNAME 
 
"Software\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security"
    PART !!PartNoAdmin
    CHECKBOX
    VALUENAME "UseVPUninstallPassword"
    VALUEON NUMERIC 0
    VALUEOFF NUMERIC 1
    END PART
  END POLICY
 
END CATEGORY
 
[STRINGS]
PolicyNoAdmin=Symantec AV Uninstall Password
ExplainNoAdmin=Remove Symantec AV Uninstall Password Requirement
PartNoAdmin=Remove Symantec AV Uninstall Password Requirement

Open in new window

0
 
LVL 1

Expert Comment

by:Computer101
ID: 20649613
Forced accept.

Computer101
EE Admin
0
 

Expert Comment

by:Ehab_Nassar
ID: 26598903
I want to make it with script  like  i use add reg ... with paramter f
with adm template need some work to do admx
could anyone help me
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
OfficeMate Freezes on login or does not load after login credentials are input.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question