Error Importing Registry file through GP

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I'm trying to import the following registry file through GP via a logon
script to disable CD burning in Windows XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoCDBurning"=dword:00000001

The problem is that I get the following error message (or close to it):

"Cannot import (filename). Not all data was successfully written to the
registry. Some keys are open by the system or other processes."

The problem really isn't GP related, because if I just double-click the
registry file as a restricted user, I get the same error message. It only
allows me to import the file if I'm logged on as an administrator.

I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
sure why I'm running into an issue with this one.

Thanks.
 
Have you tried importing the reg file in a machine startup script as
opposed to a user logon script?

That way the key might not be held open as the startup script gets
processed earlier on (while the workstation is booting)

Regards

Marcus Burrows
 
Hi Mark,

Users only have read permission under
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies.
You can design your own ADM Template to do that or try to use startup
script instead of logon script.

Regards,
 
That won't work. The key in question is a user setting, not a machine
setting.

Oli
 
I assume that if I wanted it to be a startup script that I would have to
change it to a HKLM registry entry as opposed to a HKCU entry? I prefer to
have it be a user setting as opposed to be a machine setting.

Thanks,
Mark

VMM said:
Hi Mark,

Users only have read permission under
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies.
You can design your own ADM Template to do that or try to use startup
script instead of logon script.

Regards,

Marks70 said:
I'm trying to import the following registry file through GP via a logon
script to disable CD burning in Windows XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoCDBurning"=dword:00000001

The problem is that I get the following error message (or close to it):

"Cannot import (filename). Not all data was successfully written to the
registry. Some keys are open by the system or other processes."

The problem really isn't GP related, because if I just double-click the
registry file as a restricted user, I get the same error message. It only
allows me to import the file if I'm logged on as an administrator.

I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
sure why I'm running into an issue with this one.

Thanks.
Click to expand...
Click to expand...
 
VMM wrote:
Hi,
You can design your own ADM Template to do that
Click to expand...

This policy is already part of the system.adm. So the OP just have to enable
it.

HTH
Norbert
 
Hi Mark,

That setting already exists in system administrative template like Norbet
wrote, I did not check before.

Remove CD Burning features and you can find it under User Configuration |
Administrative Templates | Windows Components | Windows Explorer

Thanks Norbert,

Regards,
 
Thanks guys. The only problem is that I don't see this setting in the
location you specified. Any ideas as to why that would be?
 
As a follow-up to my issue below, I noticed that the system.adm on my Windows
XP laptop's i386 folder is more than twice as large (1,704KB) than the one
being used in Active Directory. We are running Windows 2000 domain
controllers, and now I'm wondering if all of our .adm files are not updated.
Can and should I update the .adm files being used in our Active Directory?
 
Marks70 wrote:
Hi,
As a follow-up to my issue below, I noticed that the system.adm on my
Windows XP laptop's i386 folder is more than twice as large (1,704KB)
than the one being used in Active Directory.
Click to expand...

Than change it. ;)
We are running Windows 2000 domain controllers, and now I'm wondering if
all of our .adm
files are not updated. Can and should I update the .adm files being
used in our Active Directory?
Click to expand...

Yes. How do you editing your GPOs? Try using GPMC.

Bye
Norbert
 
Hi Norbert,

I am using GPMC on my XP system to edit and manage GPOs. That's why I'm not
understanding why it seems that the .adm files are not being updated. What
the best way of applying updates of .adm files. I was under the impression
this should be done automatically whenever a more recent .adm file was
detected, but that doesn't seem to be the case.
 
Marks70 wrote:
Hi,
I am using GPMC on my XP system to edit and manage GPOs. That's why
I'm not understanding why it seems that the .adm files are not being
updated. What the best way of applying updates of .adm files.
Click to expand...

Do it manually ;) That always works.

Bye
Norbert
 
Marks70 said:
And what does that involve?
Click to expand...

You doing it manually? ;)
http://support.microsoft.com/default.aspx?scid=kb;en-us;816662
Group Policy Management Console
By default, the Group Policy Management Console (GPMC) always uses local ADM
files, regardless of their time stamp, and never copies the ADM files to the
Sysvol. If an ADM file is not found, GPMC looks for the ADM file in the GPT.
Also, the GPMC user can specify an alternative location for ADM files. If an
alternative location is specified, this alternative location takes
precedence.

So just open each GPO and replace the adm's

Bye
Norbert
 
Back
Top