<div>
Just as a side note: There is too much shady stuff on the internet, so many people won't apply the patch no matter what you tell them it does. &nbsp;This goes directly against what we tell people every day about the internet and security.<br />
<br />
Myself, I'd never deploy a registry patch from a non-Microsoft web site.
</div>


Fractional CTO

David Favor

Jarrod

<div>
Depending on the Router in place you could set a web page each one MUST visit each time they try to reach Internet. This simple page should check the Registry and in case the value is missing, ask the User to download/run the REG File. If the value is present, the Router should allow the User to visit the requested Site.
</div>


<div>
Forgot to add, 75% of the users are offsite currently so the router approach wouldnt work well in this scenario
</div>


<div>
In order to make my idea work, you must force them to use the Router. A VPN might be a solution.<br>Any other solutions won't ensure you the Registry value is set.
</div>


<div>
Just a comment: I would never allow a registry change own my device by another party in a BYOD scenario.
</div>


<div>
So the clients in question cant use an application without the registry change. We are going to email them to advise them it needs to be done we are looking for the simplest way to achieve it as our user base ranges from very tech savy to the other end of the spectrum
</div>


<div>
So why can't the application work in the RDP environment where you have full control already?
</div>


<div>
The RDP hosting is a possibility but we don't host it there currently and not all users have access. We could package our own msi or make a custom executable to do the change as well I was more seeing if there is another approach others may have used
</div>


<div>
The app wont work without the registry change, if we emailed out the .reg file outlook removes it as an unsafe attachment which is what we would want it to do normally. Thats why hosting it somehow seemed the logical way to get it to users. Ultimately we may just have to write a custom msi to do the change I just thought there might be other ways we hadnt considered
</div>


<div>
To be honest, an application for BYOD must run stand-alone as user. It can write to the user key, this must be sufficent.
</div>


<div>
This is where you need a management solution i.e. Intune which will tie in with AzureAD
</div>


<div>
Just curious - what does the registry change do? Maybe there is another way to achieve the results you need.
</div>


<div>
As Dr. Klahn suggested... &quot;No sane person will run random code off the Net on their machines, especially granting access to make Registry updates.&quot;<br />
<br />
Best to train your users never to click + run any Website hosted code.
</div>


<div>
Registry change updates server address and some license information. The users are coming to our intranet to run said change in what every format we come up with and would be asked to run the change via official email. We have heavy covid restrictions at the moment meaning the bulk of our users are not in their normal environments so whilst this is far from ideal we were looking for the quickest way for users with little to no tech ability to have the change applied. Its likely we will build an msi file to do the changes if we have no other solutions. In an ideal situation we would have mdm available for this scenario but this is not going to be a permanent arrangement as we expect the bulk of our user base to be back on deck within 3 months
</div>


<div>
We do have our intranet where we can host the file(s), I guess it might easier hosting a zip file than creating an .msi file to be used
</div>


<div>
Any luck getting this deployed?
</div>


<div>
We decided on doing multiple approaches given the size of the user base and their levels of tech ability as well as providing the individual registry key information for those who were not comfortable to run anything we provided
</div>


<div>
<div class="content wysiwyg-content fr-view">
Im looking for advice on the simplest way to get 2000+ users to have a registry change run on their devices by running something from our website. We figure its easier if we host some form of web app or executable to do it where the end user clicks the link on the webpage to run the action. A lot of our users have remote desktop web access but I couldnt see any way we could leverage that so just wondering how others would approach this situation ?&nbsp;
</div>
</div>



Im looking for advice on the simplest way to get 2000+ users to have a registry change run on their devices by running something from our website. We figure its easier if we host some form of web app or executable to do it where the end user clicks the link on the webpage to run the action. A lot of our users have remote desktop web access but I couldnt see any way we could leverage that so just wondering how others would approach this situation ? 

Need to deploy a windows registry change to byod clients via something hosted from a webpage/site

Web applications are systems that run in browsers that perform functions normally associated with other client-based programs. One of the most commonly used web applications is email; instead of downloading individual emails to a local machine, the data is shown through a website. Other examples of web applications are collaborative systems like a wiki or an online game.

Web Applications

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.