Change workstation registry using GPO

[MarkP]

I'm trying to add the following registry key to our domain
workstations using Group Policy;

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio
n\Internet Settings\UseCoInstall

This is to allow IE to check for AD deployed ActiveX
controls (see KB 241163). I have created an .adm file for
this but it doesn't work unless I change the registry key
to:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Curr
entVersion\Internet Settings\UseCoInstall

which is of course useless as the registry key HAS TO be
in the first location above. Can anybody check the content
of my .adm file (below) and confirm everything is OK.
Incidentally, if I use the second registry path and Add
the template to the group policy editor, it appears fine
but with the .adm file changed to the proper registry
path, it doesn't show up at all!!

Help me please, I've been at this for 3 days now!! Thanks

CLASS MACHINE

CATEGORY !!RegistrySettings

KEYNAME "Software\Microsoft\Windows\CurrentVersion\Internet
Settings"
;KEYNAME "Software\Policies\Microsoft\Windows\CurrentVersio
n\Internet Settings"

POLICY !!EnableActiveX
EXPLAIN !!EnableActiveX_Explain
VALUENAME "UseCoInstall"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY

[strings]
EnableActiveX="Enable Admin Approved ActiveX Installation
via AD"
EnableActiveX_Explain="Allows users to download Admin
approved ActiveX controls from Active Directory."
RegistrySettings="Registry Settings"

 

[Arild Bakken]

I'm trying to add the following registry key to our domain
workstations using Group Policy;

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio
n\Internet Settings\UseCoInstall

This is to allow IE to check for AD deployed ActiveX
controls (see KB 241163). I have created an .adm file for
this but it doesn't work unless I change the registry key
to:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Curr
entVersion\Internet Settings\UseCoInstall

By "doesn't wok", do you mean

1. The settings doesn't work on the client
2. It doesn't show in GPO editor

I'm guessing the second. Make sure to turn off the "Show policies only" in
the GPO editor, as only settings in the second location (and the optional
Policies location) are treated as policies, whereas others are treated as
preferences (and may be changed by the users after having been applied once)


Arild

 

[MarkP]

You guessed correct! I wasn't aware of this setting. Just
tested it and it works great. I was so close, just needed
access to the option to enable it.

Thanks again.

 

[Richard(Neato)]

Thank you

Just wanted to post and say thank you. I have been searching over the internet for the same problem and now it is fixed Arild Bakken you ROCK! Who knew a little filer option would stop my ODBC.adm file.

Anyway thank you very much]

Regards,
Richard Weaver
Neato Employment ITDEPT