Solved

Group Policy best practice for startup scripts

Posted on 2013-05-15
5
632 Views
Last Modified: 2013-05-22
Two questions:

1. Startup Script
In a batch (.bat) file do I need to specify the the whole path to call .reg files setting.

regedit.exe /s /f  "\\xx.domain.xx\SysVol\xx.more.xxx\Policies\{xxx-xxx-xx-xxx-xx}\Machine\Scripts\Startup\myhklm.reg"

Open in new window


or this this ok in the .bat because the file is located in working directory.

regedit.exe /s /f  myhklm.reg

Open in new window


which is the perfered best practice.
 
2. Where should HKEY_CLASSES_ROOT (HKCR) reg fixes be applied.
In the startup script I was thinking?
0
Comment
Question by:DCSIMVT
  • 2
  • 2
5 Comments
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 500 total points
ID: 39167952
Have you thought about doing this using group policy preferences

http://technet.microsoft.com/en-us/library/cc753092.aspx

Thanks

Mike
0
 

Author Comment

by:DCSIMVT
ID: 39167997
Yes, but I figured it would be easier to update settings on the fly by just modifing the reg file.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 39168083
I've always gone with the first method.  It would also be easy to modify the GP Preferences and then you don't' have to worry about startup scripts.

Test both out in a lab

Thanks

Mike
0
 

Author Comment

by:DCSIMVT
ID: 39169088
I found it would if I did not do the whole path it would not work.

where should HKEY_CLASSES_ROOT (HKCR) be applied startup script??
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39169618
-If I may interfere-

Yes, startup script. I wanted to comment on
>  I figured it would be easier to update settings on the fly by just modifing the reg file.
Not at all. The regfile needs a new logon or (for HKCR and HKLM) even a restart. think of users who only put their computers to sleep - it would no be at all like an on-the-fly-change. With GPPs, you could even enforce such a a change right now using tools like specops gpupdate (http://www.specopssoft.com/documentation/specops-gpupdate-documentation ). It would make on the fly possible.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article runs through the process of deploying a single EXE application selectively to a group of user.
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question