locked
New-Item fails on "Policies" hive with access denied RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    It seems I can't write under policies, but directy I can. I need to alter something in registery under Policies. Is this doable?

    New-Item -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\System" -Force
    New-ItemProperty -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\System" -Name DisableAcrylicBackgroundOnLogon -Value "1" -PropertyType DWord -Force

    = access denied


    New-Item -Path "HKCU:\SOFTWARE\Microsoft\Windows\System" -Force
    New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\System" -Name DisableAcrylicBackgroundOnLogon -Value "1" -PropertyType Dword -Force

    = success

    MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.

    Monday, January 27, 2020 2:45 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Have you tried to use administrator account to run the command?

    It works for me.

    

    If you got the access denied error, I think you are having a permissions issue.

    But as Jrv said, It is useless to modify GP registry.

    Best regards,

    Lee

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, January 28, 2020 6:39 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    "Policies" is owned by GP and cannot and should not be directly edited.  Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.

    \_(ツ)_/

    Monday, January 27, 2020 7:26 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Have you tried to use administrator account to run the command?

    It works for me.

    

    If you got the access denied error, I think you are having a permissions issue.

    But as Jrv said, It is useless to modify GP registry.

    Best regards,

    Lee

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, January 28, 2020 6:39 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    "Policies" is owned by GP and cannot and should not be directly edited.  Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.

    \_(ツ)_/

    This is Intune only machine in Azure AD, not a member of AD domain. 

    MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.

    Tuesday, January 28, 2020 7:33 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    "Policies" is owned by GP and cannot and should not be directly edited.  Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.

    \_(ツ)_/

    This is Intune only machine in Azure AD, not a member of AD domain. 

    MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.

    Local Group Policy still owns the key.  Group Policy in a non-domain machine is available.  Just type "gpedit" to see the settings.

    \_(ツ)_/

    Tuesday, January 28, 2020 9:36 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Have you tried to use administrator account to run the command?

    It works for me.

    

    If you got the access denied error, I think you are having a permissions issue.

    But as Jrv said, It is useless to modify GP registry.

    Best regards,

    Lee

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thanks. Indeed something is wrong with permissions on my machine which I was first testing. I took new unit/installation and this works as it should.

    MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.

    Wednesday, January 29, 2020 10:01 AM