none
GPO to change a registry value RRS feed

  • Question

  • I need to make a GPO that changes the registry value hkey_current_user/software/microsoft/windows/currentversion/policies/explorer 'NoWindowsUpdate' from 1 to 0 based off an admin logging onto the machine

    I see a registry option in Group policy management that will let me set security policies to allow or disallow groups to change this value but how can I setup a policy to change this automatically?

    Tuesday, January 24, 2012 11:57 PM

Answers

  •  

    Computer Configuration - Preferences - Windows Settings - Registry - right click new item


    Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
    • Marked as answer by Ryan vande Wednesday, January 25, 2012 9:36 AM
    Wednesday, January 25, 2012 9:05 AM
  • you have windows server 2003 right

    you should download and install Group policy prefernce or upgrate to windows server 2008 atleast


    Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
    • Marked as answer by Ryan vande Wednesday, January 25, 2012 9:37 AM
    Wednesday, January 25, 2012 9:18 AM

All replies

  • I need to make a GPO that changes the registry value hkey_current_user/software/microsoft/windows/currentversion/policies/explorer 'NoWindowsUpdate' from 1 to 0 based off an admin logging onto the machine

    I see a registry option in Group policy management that will let me set security policies to allow or disallow groups to change this value but how can I setup a policy to change this automatically?


    Please bear with me, because I might be wrong. You want to change some registry settings from HKCU (that are created ONLY when the user logs on a computer - being part of the ntuser.dat file) using an administrator account ? Why not changing those keys as the user who logs on the computer himself. He has the right to do it and he can do it. Use GPP Registry to achieve what you want. And use groups to permit the change or not.
    " Never panic before reboot ! "
    • Edited by Voldar Wednesday, January 25, 2012 1:55 AM
    Wednesday, January 25, 2012 1:54 AM
  • Because we have 200 servers to patch and this extra step would make for at least 1 to 2 minutes extra time

     

    This registry modification changes a value so that you can install patches by clicking on the patch icon at the bottom right of the task bar, instead of opening an elevated command prompt and locating our .vbs script to go out to our wsus server to download and install the patches


    V@nd3
    Wednesday, January 25, 2012 2:12 AM
  • You can modification by Group Policy Preferences

    Computer Configuration - Preferences - Registry - right click new item

     


    Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
    Wednesday, January 25, 2012 7:25 AM
  • Tk you for the response but the key needing to be change is located under HKEY\Currentuser

    Will this still be possible?


    V@nd3
    Wednesday, January 25, 2012 7:39 AM
  • Yes this is possible

    Please select correct answer as Answer for help others


    Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
    Wednesday, January 25, 2012 7:49 AM

  • V@nd3
    Wednesday, January 25, 2012 8:52 AM
  • I don't know how you got to your options? I only can add keys and then only modify permissions on them , I cant add a new registry property
    V@nd3
    Wednesday, January 25, 2012 8:53 AM
  •  

    Computer Configuration - Preferences - Windows Settings - Registry - right click new item


    Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
    • Marked as answer by Ryan vande Wednesday, January 25, 2012 9:36 AM
    Wednesday, January 25, 2012 9:05 AM
  • Why do I not have this additional options?


    V@nd3
    Wednesday, January 25, 2012 9:13 AM
  • you have windows server 2003 right

    you should download and install Group policy prefernce or upgrate to windows server 2008 atleast


    Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
    • Marked as answer by Ryan vande Wednesday, January 25, 2012 9:37 AM
    Wednesday, January 25, 2012 9:18 AM
  • Yeah I had to do this through my windows 7 computer as anything below does not support these addtional options , thank you for the help
    V@nd3
    Wednesday, January 25, 2012 9:37 AM
  • Yes this is possible

    Please select correct answer as Answer for help others


    Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/

    I don't agree, that's not the hive for the Current User. I'm afraid you have to create a User Policy.

    Please, tell me that I'm wrong.

    Thank you.

    Friday, March 15, 2013 11:25 AM
  • Am 15.03.2013 12:25, schrieb fedayn1:
    >
    > I don't agree, that's not the hive for the Current User. I'm afraid
    > you have to create a User Policy.
    >
    > Please, tell me that I'm wrong.
    >
     
    No you are right. HKU\.DEFAULT in fact is HKEY_CURRENT_USER - but not
    for YOUR logged on account, but for local System...
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Friday, March 15, 2013 12:39 PM