Procedural changes to GPO

Posted on 2011-04-20
Last Modified: 2012-05-11
Would like to script out via GPO, changes to all but for testing purposes a few machines to change the registry keys to reflect the following settings

I need to modify the registry HKLM\System\CurrentControlSet\Services\Tcpip\Parameters:

1. First the Reg_SZ value ÓSearchListÔ has to be cleared
- This clears the ÓAppend these DNS suffixes (in order)Ô option and enables ÓAppend primary and connection specific DNS suffixesÔ

2. Next, the Reg_DWORD value ÓUseDomainNameDevolutionÔ needs to be set to 1 to enable "Append parent suffixes of the primary DNS suffix"

This will be done from a windows server 2003 box.  
Question by:cgooden01
    LVL 4

    Expert Comment


    There are couple of ways you can achieve it.

    First, make the changes in the registry key, and export it as a reg file. The same reg file can be deployed as a logon script.

    Secondly, you can use a "Reg add" contruct  from teh command line to add the necessary change and save it as a batch file. Again deploy it as a logon script.

    Last, you can create custom ADM's to acheive the goal.
    The process has been defined in the following links:

    Hope this helps!


    Author Comment

    Sounds great, i will test this within the next 24 hours. Im very familiar with these procedures just been awhile.  Referencing back to the simply creating a batch file i.e. logon script.  I dont believe its just inserting the reg file into a batch file. Is it?   So what im asking is the ways to push this via logon script.  

    Author Comment

    Testing with this command line. can i simply use this one for my hot site operations:

    regedit /s prog1.reg
    regedit /s prog2.reg

    LVL 4

    Expert Comment

    Was not at my desk.
    Sure you can!

    The reg fil works fine just fine, or else you can import it using regedit /s

    Author Comment

    Having problems with this file across multiple machines.  Maybe im missing a step but dont think so.  Require this to be implemented over just 50 machines. Normally i would do this with a GPO, but at this particular site, have no access to push this nor SMS or SCCM.  Any suggestions..
    LVL 4

    Accepted Solution

    Create a share withe veryne  as Full Control as Share permissions and NTFS as read and execute.
    Store the files here, and deploy it via Site policies ( L S D OU).

    Or yo can keep these files in the netlogon share as well!

    Author Closing Comment

    Wasnt as complete as required and not so much in a timely manner, but pointed me in the right direction to get this resolved

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    Learn about cloud computing and its benefits for small business owners.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now