none
New Registry Key

    Question

  • Hi,

    I cannot figure out how to add new Key when creating GPO object for adding a registry key.

    On right hand side of the screenshot are registry settings that I want to apply:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl

    In new registry Properties I can drill to FeatureControl. Then I have to add a new key and there is no option.

    What I am missing?


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Wednesday, January 27, 2016 2:24 PM

Answers

All replies

  • Hello,

    You were doing well. n the keypath you make the key like this:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Disable_IE11....

    Then value name you enter: iexplore.exe

    value type you make: Dword en then you enter the value you want.

    Hope this helps.

    Kind regards,

    Jochen

    • Proposed as answer by Jochenboele Wednesday, January 27, 2016 3:00 PM
    Wednesday, January 27, 2016 2:44 PM
  • Hi,

    In GPP, the key path

    “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_IE11_SECURITY_EOL_NOTIFICATION” does not exist, you should manually type it to the key path line:

    More articles for your reference:

    Configure a Registry Item

    https://technet.microsoft.com/en-us/library/cc753092.aspx

    Deploying Custom Registry Changes through Group Policy

    http://blogs.technet.com/b/askds/archive/2007/08/14/deploying-custom-registry-changes-through-group-policy.aspx

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by pob579 Thursday, January 28, 2016 5:14 PM
    Thursday, January 28, 2016 3:16 AM
    Moderator
  • Alwan, I am following the advice Jocheboele and did what you show in your screenshot.

    The gpo does applies. Can see it in gpresult -r on target pc (W7).

    For some reason I cannot run GP resultant from the DC (get message about WMI service on pc, but it run).

    I guess we can concentrate on the error I get in EventViewer of the target machine:

    "The preference item in the 'Server Local Admin Account {6EABDCD9-1567-4907-8509-5C1615636DC0}' Group Policy object did not apply because it failed with error code '0x80070057 The parameter is incorrect. This error was suppressed."

    Usually GP resultant will show the same error.

    See the pic of my Entries (Looks exactly like yours). What I can check. Also I paste MS instructions for the particular registry key on local pc.

    This what I typed in Key Path:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_IE11_SECURITY_EOL_NOTIFICATION

    is there something wrong in the syntax?

    MS instructions:

    For x64-based systems


    1. Click

    Start, type regedit in the Start Search box, and then click OK.

    2. Locate the following registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl

    3. Right-click

    FeatureControl, point to New, and then click Key.

    4. Enter FEATURE_DISABLE_IE11_SECURITY_EOL_NOTIFICATION, and then press Enter to

    name the new key.

    5. Right-click

    FEATURE_DISABLE_IE11_SECURITY_EOL_NOTIFICATION, point to New, and

    then click

    DWORD (32-bit) Value.

    6. Enter iexplore.exe, and then press Enter to name the new value.

    7. Right-click

    iexplore.exe, and then click Modify.

    8. In the

    Value data box, enter 00000001, and then click OK.

    9. Locate the following subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet

    Explorer\Main\FeatureControl

    10. Right-click

    FeatureControl, point to New, and then click Key.

    11. Enter FEATURE_DISABLE_IE11_SECURITY_EOL_NOTIFICATION, and then press Enter to

    name the new key.

    12. Right-click

    FEATURE_DISABLE_IE11_SECURITY_EOL_NOTIFICATION, point to New, and

    then click

    DWORD (32-bit) Value.

    13. Enter iexplore.exe, and then press Enter to name the new value.

    14. Right-click

    iexplore.exe, and then click Modify.

    15. In the

    Value data box, enter 00000001, and then click OK.

    16. Exit Registry Editor, and then restart the browser to enable the new key.

    The new "End of Life" upgrade notification for Internet Explorer Page 3 of 5

    https://support.microsoft.com/en-us/kb/3123303 1/21/2016


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Thursday, January 28, 2016 4:12 PM
  • > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
    > Explorer\Main\FeatureControl\FEATURE_DISABLE_IE11_SECURITY_EOL_NOTIFICATION
     
    Remove HKEY_LOCAL_MACHINE - that's already defined through the hive above...
     
    • Marked as answer by pob579 Thursday, January 28, 2016 5:13 PM
    Thursday, January 28, 2016 4:23 PM
  • I thought about that .... but did it as in first suggestion

    Also... I didn't read properly instructions...

    see step 9.

    9. Locate the following subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet

    Explorer\Main\FeatureControl

    I have to create a second entry for wow6432...

    thanks.


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis


    • Edited by pob579 Thursday, January 28, 2016 4:53 PM
    Thursday, January 28, 2016 4:41 PM
  • and just to be sure for eliminating post troubleshooting for that...

    should it be :

    SOFTWARE\Wow6432Node\Microsoft\Internet

    Explorer\Main\FeatureControl

    or with a slash at the beginning:

    \SOFTWARE\Wow6432Node\Microsoft\Internet

    Explorer\Main\FeatureControl

    thx.


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Thursday, January 28, 2016 4:56 PM
  • it works fine. 2 keys created. and no slash ...

    Thanks to all!


    --- When you hit a wrong note its the next note that makes it good or bad. --- Miles Davis

    Thursday, January 28, 2016 5:13 PM