Solved

VBS or BAT to update the local registry on domain pc run by poweruser

Posted on 2008-10-15
7
1,030 Views
Last Modified: 2012-05-05
VBS or BAT to update the local registry on domain pc run by poweruser.

I am trying to create a bat or vbs script to that a designated poweruser can run on a Domain Users machine to edit the registry.  The Domain Users account have been locked down with Group Policy so I am using the 'runas' command so johndoe (the poweruser, who as admin priv on every machine) can execute the script and update the registry key.  I have two files, the first is a batch file as shown below with one line and the second is the .reg file to alter the registry.  The script HAS TO BE RUN while the current domain user is logged on the change the key.  I keep getting directory doesn't exist errors.  Could someone please help me?


FixIE.bat:
runas /profile /env /user:thedomain\johndoe "regedit \"\\DC01\Shared Folder\Scripts\FixIE\FixIE.reg\""


FixIE.reg:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32]
@="C:\\WINDOWS\\system32\\ieframe.dll"
0
Comment
Question by:ascnd
  • 4
  • 2
7 Comments
 
LVL 67

Expert Comment

by:sirbounty
ID: 22727498
How about running it from a 'command station' under the admin or power user account?

1) Create a list of devices you want to update - c:\Computers.txt
2) Create the following batch file:


@echo off
for /f %%a in (C:\Computers.txt) do call :process %%a
goto :eof
 
:process
set pc=%1
reg add \\%pc%\hkey_classes_root\typelib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 /ve /d "C:\\WINDOWS\\system32\\ieframe.dll"

Open in new window

0
 
LVL 67

Expert Comment

by:sirbounty
ID: 22727501
Or if you want to use runas, try it with reg.exe instead:

runas /profile /env /user:thedomain\johndoe reg add \\%pc%\hkey_classes_root\typelib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 /ve /d "C:\\WINDOWS\\system32\\ieframe.dll"

0
 

Author Comment

by:ascnd
ID: 22727626
The proposed solution below (which is the one I want to use) has %pc% in it.  There are many PC's can't this be eliminated.  If so what would the line look like?

runas /profile /env /user:thedomain\johndoe reg add \\%pc%\hkey_classes_root\typelib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 /ve /d "C:\\WINDOWS\\system32\\ieframe.dll"
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 
LVL 67

Accepted Solution

by:
sirbounty earned 500 total points
ID: 22727650
If running it from a local computer, change %pc% to %computername% or simply remove that section altogether:

runas /profile /env /user:thedomain\johndoe reg add \\%computername%\hkey_classes_root\typelib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 /ve /d "C:\\WINDOWS\\system32\\ieframe.dll"

runas /profile /env /user:thedomain\johndoe reg add hkey_classes_root\typelib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 /ve /d "C:\\WINDOWS\\system32\\ieframe.dll"
0
 
LVL 21

Expert Comment

by:AmazingTech
ID: 22727835
Hmm. I don't think you can add or query hkey_classes_root remotely.

You need to do it through HKLM. You probably want to add the /f too.

Of course on the local machine use sirbounty's last runas command above. Add /f to not prompt you.
@echo off
for /f %%a in (C:\Computers.txt) do call :process %%a
goto :eof
 
:process
set pc=%1
reg add \\%pc%\hklm\software\classes\typelib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 /ve /f /d "C:\\WINDOWS\\system32\\ieframe.dll"

Open in new window

0
 

Author Comment

by:ascnd
ID: 22727875
Sirbounty,

Thank you for the solution.  I only had to alter one thing.  I had to add quotes around the command and then I had to add a \ to the nested quotes to get it to work fully.

runas /profile /env /user:c21nebraska\ghasse "reg add hkey_classes_root\typelib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 /ve /d \"C:\\WINDOWS\\system32\\ieframe.dll\""
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 22729994
Glad I could help - thanx for the grade! :^)
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Change path in batch file 2 41
Batch file to convert a xlsx file to csv 5 106
vbscript to refresh excel data connections specifying 2013 5 25
powershell function location 6 42
Over the years I have built up my own little library of code snippets that I refer to when programming or writing a script.  Many of these have come from the web or adaptations from snippets I find on the Web.  Periodically I add to them when I come…
Active Directory replication delay is the cause to many problems.  Here is a super easy script to force Active Directory replication to all sites with by using an elevated PowerShell command prompt, and a tool to verify your changes.
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question