Creating registry key via GPO

[Juanma®]

Hello,

Is there any way to create a registry key via Group Policy? I think it only
modifies permissions on a key but can't create a new one. It is related to
MS04-004 installation in order to allow my users use "userass@server" URL
post authentication.
If not, Can you tell me any way to create the key in 8000 computers?

Thanks,

 

[Mike Aubert]

Actually, you can create a custom administrative template to assign the
value.

I'm in the middle of creating an administrative template right now that
allows this value to be set. If you can wait until later this morning I will
post it.

------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
(e-mail address removed)

Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Mike Aubert]

OK, all done...

But first, a couple of notes:

- I have tested this on a Windows XP workstation...although I would
recommend you test this on a small number of systems first.

- Because the area of the registry that the policy modifies (technically it
is a "preference" and not a policy) is not tracked by Group Policy, if the
group policy object is deleted or the policy is set back to "Not Configured"
from "Enabled," the settings will _not_ be removed from target systems. That
is, computers will continue to allow credential passing in URLs. To disable
this policy you must set the policy to "Disabled" (note: after you click OK
it will show up as "Not Configured" - this is fine) and wait for all target
systems to refresh group policy settings (120 minutes by default or restart
the systems). This policy deletes the appropriate value from the registry
when it is set to disabled. Alternatively, you could also modify the
template to set the value to 1 when the policy is disabled.

Now, to add this template (assuming Windows 2000):

- Download and save it to your server:
http://www.2000trainers.com/URLpass.adm
- Open the GPO you want to add the policy to
- Expand Computer Configuration
- Right Click "Administrative Templates" and select "Add/Remove
Templates..."
- Click Add... and select the template you just downloaded
- Click Close
- Right Click "Administrative Templates" again and select "View" >
"Filtering..."
- Uncheck "Only show policy settings that can be fully managed" and click OK

- Expand "Administrative Templates"
- Expand "Windows Components"

To enable credential passing in URLs for Internet Explorer:
- Select Internet Explorer under Windows Components
- Duble click the Enable user credential passing in URLs policy
- Select Enabled and click OK

To enable credential passing in URLs for Windows Explorer:
- Select Windows Explorer under Windows Components
- Duble click the Enable user credential passing in URLs policy
- Select Enabled and click OK

These settings can also be found under the User Configuration section of the
GPO. This allows you to enable credential passing for just particular users.

------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
(e-mail address removed)

Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.