Hi,
Actually, IF you are deploying it as a Logon Script, it will only work with
the HKLUser Key. IF you deploy it as a Startup Script it WILL modify the
HKLMachine key with absolutely no problems because it uses the SYSTEM account
and not a local user account. I again have about these batch files-reg files
that do everything from turning the Numlock Key on to setting the Desktop
behind the CTRL-ALT-Del sign to adding registry keys for Applications that
need specific keys modified.
I also use VBScript files to Modify the Registry but they won't work
reliably as Start-up Scripts. The reason that VBScript won't work is simply
because the VBScript engine doesn't load until after the startup scripts.
That is why VBScript Startup scripts are unreliable. I use VBScripts soley
for logon scripts.
I have been a network Admin since Windows NT 3.x Back in those days there
was no such thing as Group Policy and everything had to be done manually so I
scripted pretty much everything with BATCH files.
There is a way to "hack" the registry of local computers using Group Policy.
I use it rarely though. It is in the Local Settings - Registry. Currently I
only use it to set permissions on the Security Tab so my users cannot see the
Security Tab in the properties and set file permissions.
Cheers,
Lara
"Mark Heitbrink [MVP]" wrote:
> Hi,
>
> lforbes schrieb:
> > I do this all the time. Works like a Charm.
> > Put the .reg file in the NETLOGON share. Have a Batch File as a Startup
> > Script. In the batch file type
> > regedit /s \\server\netlogon\file.reg
> > I have about 50 that always work.
>
> Because:
> - non is editing the HKLM Hive
> or
> - every user in your network ahs the permission to write to
> HKLM (Power User or local Admin) or manual define permissions
> vie GPO -> Registry
> - the User is allowed to edit the registry in general
>
> Deploying *.reg files in a login script or startup script
> can cause failures, there is no general way to say "it always work".
>
> Thats why I recomend to avoid them.
>
> Mark
> --
> Mark Heitbrink - MVP Windows Server
> Homepage: www.gruppenrichtlinien.de
> extend GPO: www.desktopstandard.com
> PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
>