Re: Machine policy registry keys

Yes, you can technically do that, but it's discouraged. By doing that you are throwing away a lot of the nice "magic" of group policies that makes them easier to manage, though. Group policies should internally set those registry keys after the final set of policies is determined, but again, you are throwing away the nice multiple policy resolution work that GPO can do by going straight to the registry keys.

I'm also not sure how supported it is to rely on those registry keys being settable directly, although at least for "current" platforms I don't see how Microsoft could change them without breaking stuff. They could theoretically change for new OS releases though.

--
Ken Johnson (Skywing)
Windows SDK MVP
http://www.nynaeve.net
"Jos Scherders" <thrower@xxxxxxx> wrote in message news:ulSDcGj0HHA.4184@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have used an Administrative Template to configure screensavers settings and this works fine except on some PC's. On the PC's where it does not work I do see the correct settings in Desktop -> Screensaver settings (e.g. the values I specified in the administrative templates are shown in grey) but these settings are not the one applied. Instead, the settings that are applied are the onces stored in the registry keys under HKLM\Software\Policies\etc.

So my question is. Can an administrator just create registry keys in HKLM\Software\Policies and they are processed by windows as normal policies? The screensafer settings are defined as per User settings so I am surprised by the fact that these per machine keys can override them ?

Can anyone shed some light into how these registry keys are processed by Windows ?

Thanks a lot,
Jos.


.

Relevant Pages

  • Machine policy registry keys
    ... I have used an Administrative Template to configure screensavers settings ... I do see the correct settings in Desktop -> Screensaver settings (e.g. the ... applied are the onces stored in the registry keys under ...
    (microsoft.public.platformsdk.security)
  • Re: Admin problem(s)! please help!!
    ... > If you're not using NTFS as your file system, ... > To apply group policies to all users but the Administrator: ... > allows you to apply a vast number of the group policy settings, ... I've done this via control panel, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: force xp theme
    ... I want to change these settings directly in the registry. ... Also would like to force the XP style theme as well... ... Which registry keys would I need to look at? ...
    (microsoft.public.windowsxp.general)
  • Re: How safe is dcgpofix.exe?
    ... When you refer to "security settings" being changed, ... changes made to the actual Default Domain and Default Domain Controllers ... had its Default Domain and Default Domain Controllers group policies get ...
    (microsoft.public.windows.server.general)
  • Re: 2 Screens in vertical Span Mode
    ... The display control panel is needed to support changing the resolution. ... There are registry keys that support dual monitors this will depend on device driver. ... Must I create a new componet with the cmi Settings? ... "Sean Liming " wrote: ...
    (microsoft.public.windowsxp.embedded)
Loading