Answered by:
New-Item fails on "Policies" hive with access denied

Question
-
It seems I can't write under policies, but directy I can. I need to alter something in registery under Policies. Is this doable?
New-Item -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\System" -Force
New-ItemProperty -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\System" -Name DisableAcrylicBackgroundOnLogon -Value "1" -PropertyType DWord -Force= access denied
New-Item -Path "HKCU:\SOFTWARE\Microsoft\Windows\System" -Force
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\System" -Name DisableAcrylicBackgroundOnLogon -Value "1" -PropertyType Dword -Force= success
MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.
Monday, January 27, 2020 2:45 PM
Answers
-
Hi,
Have you tried to use administrator account to run the command?
It works for me.
If you got the access denied error, I think you are having a permissions issue.
But as Jrv said, It is useless to modify GP registry.
Best regards,
Lee
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- Marked as answer by Pavel yannara Mirochnitchenko Wednesday, January 29, 2020 10:01 AM
Tuesday, January 28, 2020 6:39 AM
All replies
-
"Policies" is owned by GP and cannot and should not be directly edited. Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.
\_(ツ)_/
Monday, January 27, 2020 7:26 PM -
Hi,
Have you tried to use administrator account to run the command?
It works for me.
If you got the access denied error, I think you are having a permissions issue.
But as Jrv said, It is useless to modify GP registry.
Best regards,
Lee
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- Marked as answer by Pavel yannara Mirochnitchenko Wednesday, January 29, 2020 10:01 AM
Tuesday, January 28, 2020 6:39 AM -
"Policies" is owned by GP and cannot and should not be directly edited. Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.
\_(ツ)_/
MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.
Tuesday, January 28, 2020 7:33 AM -
"Policies" is owned by GP and cannot and should not be directly edited. Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.
\_(ツ)_/
This is Intune only machine in Azure AD, not a member of AD domain.
MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.
Local Group Policy still owns the key. Group Policy in a non-domain machine is available. Just type "gpedit" to see the settings.
\_(ツ)_/
Tuesday, January 28, 2020 9:36 AM -
Hi,
Have you tried to use administrator account to run the command?
It works for me.
If you got the access denied error, I think you are having a permissions issue.
But as Jrv said, It is useless to modify GP registry.
Best regards,
Lee
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.
Wednesday, January 29, 2020 10:01 AM