Answered by:
GPO to change a registry value
Question
-
I need to make a GPO that changes the registry value hkey_current_user/software/microsoft/windows/currentversion/policies/explorer 'NoWindowsUpdate' from 1 to 0 based off an admin logging onto the machine
I see a registry option in Group policy management that will let me set security policies to allow or disallow groups to change this value but how can I setup a policy to change this automatically?
Answers
-
Computer Configuration - Preferences - Windows Settings - Registry - right click new item
Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/- Marked as answer by Ryan vande Wednesday, January 25, 2012 9:36 AM
-
you have windows server 2003 right
you should download and install Group policy prefernce or upgrate to windows server 2008 atleast
Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/- Marked as answer by Ryan vande Wednesday, January 25, 2012 9:37 AM
All replies
-
I need to make a GPO that changes the registry value hkey_current_user/software/microsoft/windows/currentversion/policies/explorer 'NoWindowsUpdate' from 1 to 0 based off an admin logging onto the machine
I see a registry option in Group policy management that will let me set security policies to allow or disallow groups to change this value but how can I setup a policy to change this automatically?
Please bear with me, because I might be wrong. You want to change some registry settings from HKCU (that are created ONLY when the user logs on a computer - being part of the ntuser.dat file) using an administrator account ? Why not changing those keys as the user who logs on the computer himself. He has the right to do it and he can do it. Use GPP Registry to achieve what you want. And use groups to permit the change or not.
" Never panic before reboot ! "- Edited by Voldar Wednesday, January 25, 2012 1:55 AM
-
Because we have 200 servers to patch and this extra step would make for at least 1 to 2 minutes extra time
This registry modification changes a value so that you can install patches by clicking on the patch icon at the bottom right of the task bar, instead of opening an elevated command prompt and locating our .vbs script to go out to our wsus server to download and install the patches
V@nd3 -
-
-
-
-
-
Computer Configuration - Preferences - Windows Settings - Registry - right click new item
Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/- Marked as answer by Ryan vande Wednesday, January 25, 2012 9:36 AM
-
-
you have windows server 2003 right
you should download and install Group policy prefernce or upgrate to windows server 2008 atleast
Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/- Marked as answer by Ryan vande Wednesday, January 25, 2012 9:37 AM
-
-
Yes this is possible
Please select correct answer as Answer for help others
Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/I don't agree, that's not the hive for the Current User. I'm afraid you have to create a User Policy.
Please, tell me that I'm wrong.
Thank you.
-
Am 15.03.2013 12:25, schrieb fedayn1:>> I don't agree, that's not the hive for the Current User. I'm afraid> you have to create a User Policy.>> Please, tell me that I'm wrong.>No you are right. HKU\.DEFAULT in fact is HKEY_CURRENT_USER - but notfor YOUR logged on account, but for local System...
NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!