GPO startup script for applying registry

[joe haydn]

hi all. I've been trying so hard to make the Group Policy's startup/shutdown
script work for workstations to have registry applied. but no success.

Wonder if anyone can provide any kind of input.
I basically use a .cmd script, with the command reg.exe which all
workstations have, like this:

reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v
LogonPrompt /t REG_SZ /d "Welcome!!" /f

I tried using the regedit /s command with the registry file, with no success
either. There is simply no sign of the command getting executed !

I wanted to use the startup script because that's when the system account is
used to execute, whereas login script depends on who is logging to the
machine. I'd like to hear if you guys had any success in applying registry
to all the workstations at the OU level.

thanks

 

[Kurt L]

When group policies don't work (assuming they're set up correctly) its
usually permissions. Either the users do not have read and apply permissions
to the policy itself, or have insufficient permissions for the script you
have specified to execute the commands. Or even do not have read and execute
permissions on the share where the script is located. To debug a policy, I
usually throw in something like a little jscript to put up a popup or
something just so I can see if the problem lies in the application of the
policy or in execution of the script, and verify it in a test OU with a test
user until all the bugs are worked out.

....kurt

 

[PGPhantom]

What I have done which seems to work perfectly is to create a .ADM template
with my registry changes - It works far better and more reliably than
forcing registry changes through a script. I had run into the same issue
and this solution worked like a charm.