?
Solved

Group Policy best practice for startup scripts

Posted on 2013-05-15
5
Medium Priority
?
661 Views
Last Modified: 2013-05-22
Two questions:

1. Startup Script
In a batch (.bat) file do I need to specify the the whole path to call .reg files setting.

regedit.exe /s /f  "\\xx.domain.xx\SysVol\xx.more.xxx\Policies\{xxx-xxx-xx-xxx-xx}\Machine\Scripts\Startup\myhklm.reg"

Open in new window


or this this ok in the .bat because the file is located in working directory.

regedit.exe /s /f  myhklm.reg

Open in new window


which is the perfered best practice.
 
2. Where should HKEY_CLASSES_ROOT (HKCR) reg fixes be applied.
In the startup script I was thinking?
0
Comment
Question by:DCSIMVT
  • 2
  • 2
5 Comments
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 1500 total points
ID: 39167952
Have you thought about doing this using group policy preferences

http://technet.microsoft.com/en-us/library/cc753092.aspx

Thanks

Mike
0
 

Author Comment

by:DCSIMVT
ID: 39167997
Yes, but I figured it would be easier to update settings on the fly by just modifing the reg file.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 1500 total points
ID: 39168083
I've always gone with the first method.  It would also be easy to modify the GP Preferences and then you don't' have to worry about startup scripts.

Test both out in a lab

Thanks

Mike
0
 

Author Comment

by:DCSIMVT
ID: 39169088
I found it would if I did not do the whole path it would not work.

where should HKEY_CLASSES_ROOT (HKCR) be applied startup script??
0
 
LVL 57

Expert Comment

by:McKnife
ID: 39169618
-If I may interfere-

Yes, startup script. I wanted to comment on
>  I figured it would be easier to update settings on the fly by just modifing the reg file.
Not at all. The regfile needs a new logon or (for HKCR and HKLM) even a restart. think of users who only put their computers to sleep - it would no be at all like an on-the-fly-change. With GPPs, you could even enforce such a a change right now using tools like specops gpupdate (http://www.specopssoft.com/documentation/specops-gpupdate-documentation ). It would make on the fly possible.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question