Making a registry change to mulitple computers

[John]

Hi Everyone,

I have nearly 200 computers in my building that need to
have a registry value changed on them. The computers in
question are used by a group of users that are in an OU
with restricted rights. One of these rights is making
changes to the registry.

Can I deploy a registry change through a group policy? Is
there another way to do it? I need to be logged in as an
administrator at these machines when the changes are made
due to the users' restricted rights. Thanks!

John

 

[Laura E. Hunter \(MVP\)]

Depending on the scope of the change that you need to make, you can probably
do so via a Group Policy Object that's linked to the OU in question. You
can add Registry entries to be propogated to your clients within the
Computer Configuration > Security Settings > Registry portion of the GPO.

(Insert all standard disclaimers regarding Registry editing, testing and
your mileage varying.)

Hope this helps,

Laura

 

[Oli Restorick [MVP]]

Laura

Isn't this feature for setting registry security, rather than adding
registry entries?

The way I do this is to use a computer startup script, containing the line
"regedit.exe /s myfile.reg". This is entered as regedit.exe with "/s
myfile.reg" being the parameter (you'll see what I mean when you look at the
dialogue). Then, click the "show files" button and drag the registry file
(exported from regedit) into the Explorer window. This way, you're not
depending on a certain server being alive.

Oh, and this:
(Insert all standard disclaimers regarding Registry editing, testing and
your mileage varying.)


Hope this helps

Oli

 

[Laura E. Hunter [MVP]]

Gah, sorry. Oli's right, I always get that mixed up. :-( The GPO settings
I mentioned are used to set security on Registry keys, not to add/remove
entries. A startup script will work well in the case you're describing.