Add Registry Key using Group Policy

[Guest]

There is a new serial number for a program which is stored in the registry.
I want to deploy this serial key to all computers in my Active Directory.

Is there a way to add this key to all computers using Group Policy?
Thanks,
Jason

 

[Mike Kolitz]

There's no way to actually add a key or value with Group Policy alone.
You can use Group Policy to force a startup/logon script to run that will
place the key/value in the registry, or use Group Policy software
installation to force an MSI to run which will add the key/value.

 

[Guest]

How do I make an MSI package for something just as simple as regedit /s
keyiwanttoad.reg ? I suppose this could probably be written as a script too,
if so, I would probably have to have it do a runas an administrator in order
to add the key?

 

[Torgeir Bakken \(MVP\)]

How do I make an MSI package for something just as simple as
regedit /s keyiwanttoad.reg ?
I suppose this could probably be written as a script too, if so,
I would probably have to have it do a runas an administrator
in order to add the key?

Using a MSI file for this is overkill.

Actually, you can use "pure" Group Policy to push out your own
registry settings (see further down).

But I think would have done it in a in a computer startup script
(with a GPO) that runs as part of the boot up process (before the
user logs in). It runs under the system context and has admin rights.
You could use reg.exe that comes builtin with WinXP, or use a
VBScript and it's RegWrite method (will work on Win2k computers as
well).


Alternatively:

You can push out that registry value with a GPO using a
custom administrative template ("tattooing" the registry on
the clients)...

HOW TO: Create Custom Administrative Templates in Windows 2000
http://support.microsoft.com/?kbid=323639

225087 Writing Custom ADM Files for System Policy Editor
http://support.microsoft.com/?kbid=225087

Implementing Registry-Based Group Policy
go.microsoft.com/fwlink/?LinkId=28188

Implementing Registry-based Policy [Group Policy]
http://msdn.microsoft.com/library/en-us/policy/policy/implementing_registry_based_policy.asp