PUSH registry addition to HKLM to win7 and winxp PC's from 2008 DC not working

[kennysarmy]

I'd like to edit all PC's on our network with a new registry key to the HKEY_LOCAL_MACHINE\SOFTWARE\ key

In the long distance past I have done this by editing the logon script to inc. a line such as:

regedit.exe /s "\\server\netlogon\Batch\newregentries.reg"

I've not had any need to mess with this for a while but none of my clients XP or Win7 are picking up the new setting when logging in as standard users.

If I logon as a domain admin then the logon script entry correctly adds the new key to the local registry....

Any ideas?
Thanks.

Is it possible to create a GPO to push out a registry change to XP clients from a 2008 AD or will that only work for windows 7 clients?

[Steve21]

Any ideas?

Aren't logon scripts (per use) done as user privelages? aka no running exe's?

Thought only machine (start up) scripts done as admin.

Steve

[speckled]

If you get the login script to copy to the local PC it will work fine...something like this....
Batch file 1:If Not Exist "C:\Highcon\logfile.txt" \\server\Highcon$\HighCon.bat
Batch File 2:MD C:\Highcon
Copy \\Server\Highcon$\*.* C:\Highcon
regedit /s C:\highcon\HighCon.reg > C:\Highcon\logfile.txt

[Brpilot99]

Make sure all users can acctually see the folder that you have the reg file in .....

[TheLibrarian]

Group Policy Preferences can push the HKLM entries, GPP is supported natively by Windows 7 but Windows XP requires a couple of updates IIRC.

Although having looked on the Microsoft site it would appear Windows XP only needs one update.

You could look at the reg command in a machine start up script (users probably wouldn't have the rights necessary to add to the local machine registry).

[kennysarmy]

Thanks guys....

GPP [Group Policy Preferences] seems to be the way to go: Created a GPO that pushes out the reg. entry....

Tested on an XP client after manually installing KB943729....

I can push the Group Policy Preference Client Side Extensions for Windows (KB943729) out with our WSUS and then I can target all the XP clients using GPP in the future too.