I'm stuck !! Group Policy Registry Keys

[mattx]

Lordy I'm stuck - I've added keys etc via group policy before but never values. Can it be done ? I can't see the wood from the trees in regards to the amount of documentation I've googled so far.

Example from this:

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Multimodis Latina\Revise Latin\VerbsE]
"regcode1"="{removed as its part of a key}"
"regcode2"="{removed as its part of a key}"
"regcode3"="{removed as its part of a key}"

 

I can add the key HKEY_LOCAL_MACHINE\SOFTWARE\Multimodis Latina\Revise Latin\VerbsE

But can't work out how to add the values of after that.... [ The regcode entries ]

Someone put me out of my misery....

 

And I want to do this via group policy as I can't be arsed to knock up a script.

Edited February 4, 2010 by ZeroHour

[sted]

in 2003 all you can do is premissions isnt it?

 

i think 08 allows you to add keys via preferences

[mattx]

in 2003 all you can do is premissions isnt it?

 

i think 08 allows you to add keys via preferences

 

Bugger - if that's the case. [ I can add the keys, it's the values I need to add too ] Looks like a script it will have to be then - god darn it.

[sted]

you may be able to make a custom gpo to set them

[chazzy2501]

Can't you add reg values using the GPO client side extensions?

[bossman]

@mattx:

 

Is this what your after?

How to add, modify, or delete registry subkeys and values by using a registration entries (.reg) file

 

Or am I barking up the wrong Reg tree WooF! WooF!

[sparkeh]

Yeah you can do this, the MS guide is here

 

Edit: Ah Bossman beat me to it

 

Edit2: Here is more info on GPOs and Reg changes from msdn

Edited February 4, 2010 by sparkeh

[mattx]

@mattx:

 

Is this what your after?

How to add, modify, or delete registry subkeys and values by using a registration entries (.reg) file

 

Or am I barking up the wrong Reg tree WooF! WooF!

 

Your puns are getting worse.......

Sort of, I have some .reg files already in effect via user logon scripts. I wanted to be clever and do it via group policy instead......Security\Registry etc - why ? 'Cos I'm bored and wanted to do something in a different way that I have done before...

[powdarrmonkey]

You need the .adm white paper: http://www.microsoft.com/downloads/details.aspx?FamilyId=E7D72FA1-62FE-4358-8360-8774EA8DB847&displaylang=en

 

It was last changed in 2004 though - the API is pretty stable, but if you're going to do anything weird check it hasn't changed since then.

[ZeroHour]

You could just use group policy extensions as working with the registry is a part of that. Thats what we use and it rocks so far.

[mattx]

Something is going out the window in a moment -

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Multimodis Latina\Revise Latin\VerbsE]

"regcode1"="{removed as its part of a key}"
"regcode2"="{removed as its part of a key}"
"regcode3"="{removed as its part of a key}"

 

In a .reg file is not working with my normal logon scripts with a:

 

regedit /s revise_latin2.reg

 

line in - it's not even adding the frigging key for christ's sake......All my other ones are working......looking for something to throw out the window.....

Edited February 4, 2010 by ZeroHour
removed keys

[SYNACK]

This could be of some help http://www.edugeek.net/forums/windows-server-2000-2003/31197-guide-creating-custom-adm-files-gpo-distribution.html

 

It outlines the creation of ADM templates for stuff like this.

[mattx]

You could just use group policy extensions as working with the registry is a part of that. Thats what we use and it rocks so far.

 

Thanks for the heads up on this - I have not looked into it at all but certainly will do as it may be help quite a bit on our 2003 server setup.

[sted]

Something is going out the window in a moment -

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Multimodis Latina\Revise Latin\VerbsE]

"regcode1"="{removed as its part of a key}"
"regcode2"="{removed as its part of a key}"
"regcode3"="{removed as its part of a key}"

 

In a .reg file is not working with my normal logon scripts with a:

 

regedit /s revise_latin2.reg

 

line in - it's not even adding the frigging key for christ's sake......All my other ones are working......looking for something to throw out the window.....

 

whatabout as a startup script as they run as admin login run as the users dont they?

[mattx]

whatabout as a startup script as they run as admin login run as the users dont they?

 

Well it's odd as I have made a .reg & have it running in a logon script with a regedit /s command with other ones and it's just not working - my other ones are, [ for example that one that forces a change in the desktop wallpaper ] - but this one just refuses to work. I'll end up knocking up a AutoIT script by the looks of it.

I've tried various versions of the .reg file etc but nope, just won't take. Tried admin accounts too, nothing....Must be a 'feature'

[2097]

its a localmachine Reg setting so i assume it can only be done as a STARTUP script not a user script..

 

IRC .. users dont have access to write to the LOCALMACHINE part of the registry only the CURRENT USER ... Which probally explains why your Desktop Wallpaper one works.

 

Cant explain why the admins cant run it though.

[mattx]

Christ on a bike......

Just to get this bit of software working I have had to do the following:

 

Create a startup script with the registry entries in with the line regedit /s reg.reg line in the CMD. Thinking that was good enough - OH no, the software required the user to have modify rights to the reg entries - read not good enough, so had to add that via a policy entry.......

All that just to get a flash based bit of software working - another bit of software to add to my crap list......

[bossman]

@mattx:

 

Flash!!..................dun! dun! dun!......................Ahhaaaaa!!

Flash!!..................dun! dun! dun!......................Ahhaaaaa!

 

Saviour of the Universe.......................dun! dun! dun! :)

[HullFC]

Hi All,

 

I would seriously advise using group policy prefs. You can use it with server 2003 as long as you manage it from a vista/7 station. It would solve a problem like this in a jiffy.

 

Shaun

[mattx]

Oooo hang on, nope - PCs won't take the policy changes I have made on the registry entries......god darn it....anyone know the syntax of the top of their head either using regedit32 or Xcalcs to change a key's permissions......?

[mac_shinobi]

 

line in - it's not even adding the frigging key for christ's sake......All my other ones are working......looking for something to throw out the window.....

 

if you have any macs nearby that your tempted to throw out a window maybe you could save a mac and send me it via snail mail

 

edited

 

Is this in vbscript or what scripting language?

 

Registry permissions can be manipulated through the command line using the SubInACL.exe tool. For example, the permissions on the HKEY_LOCAL_MACHINE\SOFTWARE key can be displayed using:

 

subinacl /keyreg HKEY_LOCAL_MACHINE\SOFTWARE /display

 

 

http://en.m.wikipedia.org/wiki/Windows_Registry?wasRedirected=true

 

as per wikipedia you can script perms through the subinacls exe or equivelant util

Edited February 11, 2010 by mac_shinobi

[mattx]

if you have any macs nearby that your tempted to throw out a window maybe you could save a mac and send me it via snail mail

 

edited

 

Is this in vbscript or what scripting language?

 

 

 

Windows Registry

 

as per wikipedia you can script perms through the subinacls exe or equivelant util

 

One of our teacher's has a Mac, sorry HAD a Mac, he got so fed up with it he's dumped it and gone back to Windows.......will use Regini to change the permissions - but with the bleeding phone constantly going and people coming in and out of the office asking for stuff I never got round to finishing it - still there is always half term.....

[box_l]

how about reg2adm from the N.U.T.S package Yizhar Hurwitz page

 

it works a treat for me.

 

BoX

[mattx]

how about reg2adm from the N.U.T.S package Yizhar Hurwitz page

 

it works a treat for me.

 

BoX

 

Thanks - will take a look at that.

[mac_shinobi]

One of our teacher's has a Mac, sorry HAD a Mac, he got so fed up with it he's dumped it and gone back to Windows.......will use Regini to change the permissions - but with the bleeding phone constantly going and people coming in and out of the office asking for stuff I never got round to finishing it - still there is always half term.....

 

dumped it where ?