Need to edit HKCU\Software\Policies

  • Thread starter Thread starter Toothman
  • Start date Start date
T

Toothman

Hello Everyone,

I though I would try a post here for a problem I have in relation to
Group Policy being applied in a remote site.

I have a remote site where I need to add the reg value
"GroupPolicyMinTransferRate" to
"HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System on the
machines to allow GP to be applied. The users are not admins so they do
not have the permissions to modify this key and the users who login can
change frequently; there also might be
new users in the future so I can't just make a user a temporary admin
while I change the key.
I've tried using RunAs utilities such as Sanur and PsExec but with no
luck, it appears that only a user who is logged in and has admin rights
can modify the HKCU\Software\Policies keys?

Any help would be appreciated,
Thanks,
Corin Casey

Post in Group Policy group: http://tinyurl.com/kubxr
 
You should be able to make that change via Group Policy user
configuration/administrative templates/system/group policy and it should
apply at the next Group Policy refresh which can be forced by running
gpupdate on the client computer. Slow link detection does not prevent all
Group Policy from being applied - only certain parts of it as described in
the link below that does not include administrative templates settings.
Having said that and assuming you have file and print sharing connectivity
to the computer you should be able to edit the registry remotely by using
regedit on your computer and selecting file - connect network
gistry. --- Steve


http://technet2.microsoft.com/WindowsServer/en/Library/88586664-6a14-479f-8b10-8986020339931033.mspx
 
Thanks for the reply Steve.

My GPs are not applying unless I add the "GroupPolicyMinTransferRate"
registry key (Event ID: 1054 in the App. event log "Group Policy
processing aborted") and I also get an error (INFO: The policy object
does not exist.) when performing a gpresult from the CMD prompt.

I can remotely edit the registry but I have 85 machines at the remote
site and constantly changing users, I was looking for a way to create a
script to add the HKCU reg key when they login; if I could find a way
to add the key I can take care of the automation part.

Cheers,
Corin
 
Interesting. That is the first I have ever heard of that behavior as
normally most Group Policy will still apply over a detected slow link other
then the exceptions defined in the link in my last post. You could create a
..reg file to apply the change via a logon script but I would think that
since Group Policy is not applying it would have to be the older legacy type
logon script. The link below shows how to make registry changes with .reg
files. --- Steve

http://support.microsoft.com/kb/310516

Regedit.exe supports a /s command-line switch to not display these messages.
For example, to silently run the .reg file (with the /s switch) from a login
script batch file, use the following syntax:
regedit.exe /s path of .reg file
 
Thanks for the assistance, I've solved the issue using a compiled exe
written with VB. The script will read the registry to get the users sid
and then place that in a variable, this variable is then used to write
the reg value. I use psexec to run the exe and write the value to
HKCU\Software\Policies; all seems to be working well.

Cheers,
Corin.
 
Is it possible give me the script info as I have been struggling with the
same problem for the last 2 and half weeks. I managed to work out it was that
registry key as well but have had the same problem on getting it changed
while logged in as a user.
 
Back
Top