locked
New-Item fails on "Policies" hive with access denied RRS feed

  • Question

  • It seems I can't write under policies, but directy I can. I need to alter something in registery under Policies. Is this doable?

    New-Item -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\System" -Force
    New-ItemProperty -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\System" -Name DisableAcrylicBackgroundOnLogon -Value "1" -PropertyType DWord -Force

    = access denied


    New-Item -Path "HKCU:\SOFTWARE\Microsoft\Windows\System" -Force
    New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\System" -Name DisableAcrylicBackgroundOnLogon -Value "1" -PropertyType Dword -Force

    = success


    MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.

    Monday, January 27, 2020 2:45 PM

Answers

  • Hi,

    Have you tried to use administrator account to run the command?

    It works for me.

    

    If you got the access denied error, I think you are having a permissions issue.

    But as Jrv said, It is useless to modify GP registry.

    Best regards,

    Lee


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, January 28, 2020 6:39 AM

All replies

  • "Policies" is owned by GP and cannot and should not be directly edited.  Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.


    \_(ツ)_/

    Monday, January 27, 2020 7:26 PM
  • Hi,

    Have you tried to use administrator account to run the command?

    It works for me.

    

    If you got the access denied error, I think you are having a permissions issue.

    But as Jrv said, It is useless to modify GP registry.

    Best regards,

    Lee


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, January 28, 2020 6:39 AM
  • "Policies" is owned by GP and cannot and should not be directly edited.  Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.


    \_(ツ)_/

    This is Intune only machine in Azure AD, not a member of AD domain. 

    MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.

    Tuesday, January 28, 2020 7:33 AM
  • "Policies" is owned by GP and cannot and should not be directly edited.  Any edits will be removed on the next GP refresh so making direct changes, if possible, would be useless.


    \_(ツ)_/

    This is Intune only machine in Azure AD, not a member of AD domain. 

    MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.

    Local Group Policy still owns the key.  Group Policy in a non-domain machine is available.  Just type "gpedit" to see the settings.


    \_(ツ)_/

    Tuesday, January 28, 2020 9:36 AM
  • Hi,

    Have you tried to use administrator account to run the command?

    It works for me.

    

    If you got the access denied error, I think you are having a permissions issue.

    But as Jrv said, It is useless to modify GP registry.

    Best regards,

    Lee


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thanks. Indeed something is wrong with permissions on my machine which I was first testing. I took new unit/installation and this works as it should.

    MCSE Mobility 2018. Expert on SCCM, Windows 10, ALOVPN, MBAM.

    Wednesday, January 29, 2020 10:01 AM