Error Trying to Import Registry File

[Guest]

I'm trying to import the following registry file through GP via a logon
script to disable CD burning in Windows XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoCDBurning"=dword:00000001

The problem is that I get the following error message (or close to it):

"Cannot import (filename). Not all data was successfully written to the
registry. Some keys are open by the system or other processes."

The problem really isn't GP related, because if I just double-click the
registry file as a restricted user, I get the same error message. It only
allows me to import the file if I'm logged on as an administrator.

I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
sure why I'm running into an issue with this one.

Thanks.

 

[Steven L Umbach]

That is because users do not have write permissions to policies key and you
do not want them to. Instead try using
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
as a Group Policy "startup" script and it should disable cd burning for all
users on the computer. If you want it to apply to specific domain users
users then create and deploy a custom .adm template as described in the
article at the first link below and use Group Policy to apply it to the
users you want to restrict. --- Steve

http://thelazyadmin.net/index.php?/archives/125-Creating-Custom-ADM-Templates.html
http://www.windowsecurity.com/articles/Pushing-Out-Security-Settings-Configured-Registry.html
--- options for pushing out registry settings.

 

[Guest]

Thanks for the explanation Steven. I guess I'm confused then why another
HKEY_CURRENT_USER registry item that had a change for Internet Explorer was
able to be imported through a logon script. Can some HKCU registry items be
imported through a logon script, and if not, I don't understand why the IE
registry change worked.

That is because users do not have write permissions to policies key and you
do not want them to. Instead try using
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
as a Group Policy "startup" script and it should disable cd burning for all
users on the computer. If you want it to apply to specific domain users
users then create and deploy a custom .adm template as described in the
article at the first link below and use Group Policy to apply it to the
users you want to restrict. --- Steve

http://thelazyadmin.net/index.php?/archives/125-Creating-Custom-ADM-Templates.html
http://www.windowsecurity.com/articles/Pushing-Out-Security-Settings-Configured-Registry.html
--- options for pushing out registry settings.

I'm trying to import the following registry file through GP via a logon
script to disable CD burning in Windows XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoCDBurning"=dword:00000001

The problem is that I get the following error message (or close to it):

"Cannot import (filename). Not all data was successfully written to the
registry. Some keys are open by the system or other processes."

The problem really isn't GP related, because if I just double-click the
registry file as a restricted user, I get the same error message. It only
allows me to import the file if I'm logged on as an administrator.

I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
sure why I'm running into an issue with this one.

Thanks.

 

[Steven L Umbach]

It depends on the permissions the user has to the registry key which can be
viewed with regedit. Often the user will have full control but in general
not for policies though administrators would have full control. --- Steve

Thanks for the explanation Steven. I guess I'm confused then why another
HKEY_CURRENT_USER registry item that had a change for Internet Explorer
was
able to be imported through a logon script. Can some HKCU registry items
be
imported through a logon script, and if not, I don't understand why the IE
registry change worked.

That is because users do not have write permissions to policies key and
you
do not want them to. Instead try using
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
as a Group Policy "startup" script and it should disable cd burning for
all
users on the computer. If you want it to apply to specific domain users
users then create and deploy a custom .adm template as described in the
article at the first link below and use Group Policy to apply it to the
users you want to restrict. --- Steve

http://thelazyadmin.net/index.php?/archives/125-Creating-Custom-ADM-Templates.html
http://www.windowsecurity.com/articles/Pushing-Out-Security-Settings-Configured-Registry.html
--- options for pushing out registry settings.

I'm trying to import the following registry file through GP via a logon
script to disable CD burning in Windows XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoCDBurning"=dword:00000001

The problem is that I get the following error message (or close to it):

"Cannot import (filename). Not all data was successfully written to the
registry. Some keys are open by the system or other processes."

The problem really isn't GP related, because if I just double-click the
registry file as a restricted user, I get the same error message. It
only
allows me to import the file if I'm logged on as an administrator.

I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm
not
sure why I'm running into an issue with this one.

Thanks.