Re: Group Policy question

Ian wrote:
You can also do this with the registry (which is what policies do,
anyway)

IMO You have that backwards: The best way is with policies, NOT by editing
the Registry. For obvious reasons editing the REgistry should be a last
resort of the only way to accomplish something.


A useful resource: http://www.theeldergeek.com

The best way to do this is with .reg files, which are text
representations of the registry changes you want to make.

Registry "files" ARE text, not representations of text.

Changes to HKEY_CURRENT_USER only affect the logged-on user.
However, if you want to change settings in an account other then the
one that's logged-on, then you need to figure-out which HKEY_USERS
subkey belongs to that user.

A limitation is that this approach won't work for account-security
settings.

Do exercise some caution as it's possible to break the machine by
incautious registry-editing. (Mind you, same applies to policies)

Policies are much less prone to catastrophic changes, and in general keep
any changes that ARE done at least confined to a specific area. Not so in
the Registry where you can find identical entries in sevearl differnt
places, only one of which may be the one you need to edit. Jeez!





.

Relevant Pages

  • Re: Local policy, IE and SP2...
    ... I must mention here that I rarely use GPEdit and almost always I change the Explorer or System policies through registry. ... The same I did for those tests I mentioned for SP2. ... this is true - those policies will not allow you to lock user accounts from launching applications from hidden drives. ...
    (microsoft.public.windowsxp.embedded)
  • RE: Moving from NT4 policy to Group Policy
    ... The mixed environment of Group policies and System policies ... policies which are permanently applied in the registry and Group Policy ... which is all documented by MS for non GPO ...
    (microsoft.public.windows.server.active_directory)
  • Re: What program is used to write events to the event log??????
    ... I believe that the event logging functionality is implemented as ... > issue....whenever there is an exe being started it normally writes this ... a few days ago I posted a question about wether these policies could ... > search function it can only be found in the registry at the three above ...
    (microsoft.public.windowsxp.security_admin)
  • Re: disable double clicking attachments
    ... separate of the e-mail is the second prompt. ... You can't do what you want in Outlook. ... They could edit the registry to add filetypes to the Level1Remove ... Using Exchange would have its policies override what the user ...
    (microsoft.public.outlook.general)
  • Re: Group Policy question
    ... System policies is an old way that was used in the pre Windows 2000 days. ... I do know to not mess with the registry ... help pages in Group Policy and read something about System Policy and how ... able to use it to some degree to lock down the limited account I created I ...
    (microsoft.public.windowsxp.security_admin)