Error Importing Registry file through GP

[Guest]

I'm trying to import the following registry file through GP via a logon
script to disable CD burning in Windows XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoCDBurning"=dword:00000001

The problem is that I get the following error message (or close to it):

"Cannot import (filename). Not all data was successfully written to the
registry. Some keys are open by the system or other processes."

The problem really isn't GP related, because if I just double-click the
registry file as a restricted user, I get the same error message. It only
allows me to import the file if I'm logged on as an administrator.

I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
sure why I'm running into an issue with this one.

Thanks.

 

[coalbiter]

Have you tried importing the reg file in a machine startup script as
opposed to a user logon script?

That way the key might not be held open as the startup script gets
processed earlier on (while the workstation is booting)

Regards

Marcus Burrows

 

[Guest]

Hi Mark,

Users only have read permission under
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies.
You can design your own ADM Template to do that or try to use startup
script instead of logon script.

Regards,

 

[Oli Restorick [MVP]]

That won't work. The key in question is a user setting, not a machine
setting.

Oli

 

[Guest]

I assume that if I wanted it to be a startup script that I would have to
change it to a HKLM registry entry as opposed to a HKCU entry? I prefer to
have it be a user setting as opposed to be a machine setting.

Thanks,
Mark

Hi Mark,

Users only have read permission under
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies.
You can design your own ADM Template to do that or try to use startup
script instead of logon script.

Regards,

I'm trying to import the following registry file through GP via a logon
script to disable CD burning in Windows XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoCDBurning"=dword:00000001

The problem is that I get the following error message (or close to it):

"Cannot import (filename). Not all data was successfully written to the
registry. Some keys are open by the system or other processes."

The problem really isn't GP related, because if I just double-click the
registry file as a restricted user, I get the same error message. It only
allows me to import the file if I'm logged on as an administrator.

I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
sure why I'm running into an issue with this one.

Thanks.

 

[Norbert Fehlauer [MVP]]

VMM wrote:
Hi,

You can design your own ADM Template to do that

This policy is already part of the system.adm. So the OP just have to enable
it.

HTH
Norbert

 

[Guest]

Hi Mark,

That setting already exists in system administrative template like Norbet
wrote, I did not check before.

Remove CD Burning features and you can find it under User Configuration |
Administrative Templates | Windows Components | Windows Explorer

Thanks Norbert,

Regards,

 

[Guest]

Thanks guys. The only problem is that I don't see this setting in the
location you specified. Any ideas as to why that would be?

 

[Guest]

As a follow-up to my issue below, I noticed that the system.adm on my Windows
XP laptop's i386 folder is more than twice as large (1,704KB) than the one
being used in Active Directory. We are running Windows 2000 domain
controllers, and now I'm wondering if all of our .adm files are not updated.
Can and should I update the .adm files being used in our Active Directory?

 

[Norbert Fehlauer [MVP]]

Marks70 wrote:
Hi,

As a follow-up to my issue below, I noticed that the system.adm on my
Windows XP laptop's i386 folder is more than twice as large (1,704KB)
than the one being used in Active Directory.

Than change it.

We are running Windows 2000 domain controllers, and now I'm wondering if
all of our .adm
files are not updated. Can and should I update the .adm files being
used in our Active Directory?

Yes. How do you editing your GPOs? Try using GPMC.

Bye
Norbert

 

[Guest]

Hi Norbert,

I am using GPMC on my XP system to edit and manage GPOs. That's why I'm not
understanding why it seems that the .adm files are not being updated. What
the best way of applying updates of .adm files. I was under the impression
this should be done automatically whenever a more recent .adm file was
detected, but that doesn't seem to be the case.

 

[Norbert Fehlauer [MVP]]

Marks70 wrote:
Hi,

I am using GPMC on my XP system to edit and manage GPOs. That's why
I'm not understanding why it seems that the .adm files are not being
updated. What the best way of applying updates of .adm files.

Do it manually That always works.

Bye
Norbert

 

[Guest]

And what does that involve?

Marks70 wrote:
Hi,


Do it manually That always works.

Bye
Norbert

 

[Norbert Fehlauer [MVP]]

And what does that involve?

You doing it manually?
http://support.microsoft.com/default.aspx?scid=kb;en-us;816662
Group Policy Management Console
By default, the Group Policy Management Console (GPMC) always uses local ADM
files, regardless of their time stamp, and never copies the ADM files to the
Sysvol. If an ADM file is not found, GPMC looks for the ADM file in the GPT.
Also, the GPMC user can specify an alternative location for ADM files. If an
alternative location is specified, this alternative location takes
precedence.

So just open each GPO and replace the adm's

Bye
Norbert