Solved

Registry change using Gpo

Posted on 2011-09-06
10
992 Views
Last Modified: 2012-05-12
Hi,

We are using Windows Server 2003 domain contollers. Our clinet machines are running in Windows XP. I need to modify the following registy key on all our clinet machines using group policy.

Currently the registy setting is having the value 1 and I need to change it to 0 using gpo.


"Hkey_Local_Machine\System\CurrentConrolSet\Control\Filesystem\NtfsDisable8dot3NameCreation"

The above reg value should be 0.

Can you please provide me any .adm template or the corresponding settings in the GPMC console for this.

Thanks in advance.
0
Comment
Question by:gaddam01
10 Comments
 
LVL 10

Expert Comment

by:cjrmail2k
Comment Utility
...configure this Policy (WS2008 R2 here): Computer Configuration\Policies\Administrative Templates\System\Filesystem\NTFS\Short Name Creation Options

I know this is for 2008 but it may exist in 2003
0
 

Author Comment

by:gaddam01
Comment Utility
The above the options is not available in Windows Server 2003.
0
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 500 total points
Comment Utility
Hi try with that

CLASS MACHINE

CATEGORY "NTFS Management"

KEYNAME "System\CurrentConrolSet\Control\Filesystem"

      POLICY "8dot3 Name Creation"

      EXPLAIN "Disables 8dot3 Name Creation"
      SUPPORTED "Windows 2000+"
      VALUENAME "NtfsDisable8dot3NameCreation"
      VALUEON NUMERIC 0
      VALUEOFF NUMERIC 1

      END POLICY

END CATEGORY

if you have at least one 2008 DC, you can use for that GPP (Group Policy Preferences) but first of all you have to install CSE (cClient Side Extension) on that server 2003

Regards,
Krzysztof
0
 
LVL 18

Expert Comment

by:Raheman M. Abdul
Comment Utility
0
 

Author Comment

by:gaddam01
Comment Utility
Hello,

Hi try with that

CLASS MACHINE

CATEGORY "NTFS Management"

KEYNAME "System\CurrentConrolSet\Control\Filesystem"

      POLICY "8dot3 Name Creation"

      EXPLAIN "Disables 8dot3 Name Creation"
      SUPPORTED "Windows 2000+"
      VALUENAME "NtfsDisable8dot3NameCreation"
      VALUEON NUMERIC 0
      VALUEOFF NUMERIC 1

      END POLICY

END CATEGORY


If the above code I had save it as .adm template then where is the location in GPMC I can configure this??
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 39

Expert Comment

by:Krzysztof Pytko
Comment Utility
You need to download GPMC as separate installation fole (it's not included within 2003) from
http://www.microsoft.com/download/en/details.aspx?id=21895

Krzysztof
0
 

Author Comment

by:gaddam01
Comment Utility
Hello,

I had already installed GPMC. Can you please specify the path for the registy settings where I need to configure in the Group policy Editor?
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
Comment Utility
OK, you need to run GPMC and create new GPO or select the existing one. Now, edit it, and select "Computer Configuration -> Administrative Templates". Click on it right mouse button and choose "Add/Remove Templates" point to the location where ADM file is saved. Now, go to menu "View -> Filtering" and unselect both checkboxes at the bottom.
Now, you should be able to see new node "NTFS Management". Configure there "8dot3 Name Creation" and choose "Enabled"
Link GPO to appropriate OU with computers and reboot it to take it effect

Krzysztof
0
 

Author Comment

by:gaddam01
Comment Utility
I've requested that this question be closed as follows:

Accepted answer: 0 points for gaddam01's comment http:/Q_27292704.html#36487917

for the following reason:

solution worked for me.
0
 

Author Comment

by:gaddam01
Comment Utility
I need to raise one more question. So please close this question now.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now