group policy for registry settings... HOW!?!?!?! 2

[iwannabeit]

i have make the following keys with read/write privs, and rather than go from computer to computer doing it manually, how would i do it VIA a GPO? Thanks for your input, guys!

HKLM\system\currentcontrolset\services\tcpip\parameters

HKLM\system\currentcontrolset\services\eventlog\application\probe

HKLM\system\currentcontrolset\services\eventlog\application\probe\eventmessagefile

HKLM\system\currentcontrolset\services\eventlog\application\probe\categorymessagefile

HKLM\system\currentcontrolset\services\eventlog\application\probe\categorycount

HKLM\system\currentcontrolset\services\eventlog\application\probe\typessupported

...Hey now...

 

[ncotton]

This is assuming, for whatever reason, you meant what you asked for, and just want to create the key, and no specific value:data in it. I have created values named Default in each key.

Copy this to notepad, save as c:\windows\inf\njcISCreateReg.adm.

Make sure you set the Save As Type = All Files (*.*)

Open up your GPO Editor for your GPO > Computer Configuration > right click Administrative Templates > Add/Remove Administrative Templates > Add > select c:\windows\wind\njcISCreateReg.adm > OK > close.
On the GPOE click View from the top menu > Filtering > DESELECT / UNCHECK "Only Show Settings That Can Be Fully Managed". All options in this window should be OFF.

Under Administrative Templates you will see "NJC Info Sys GP Edits" > below that "Registry Edits" > on the right, there is a setting for each Registry Key you want to create.

Here you go.

CLASS MACHINE
    CATEGORY !!NJCISEDITS
        CATEGORY !!Registry
           POLICY "system\currentcontrolset\services\tcpip\parameters"
                KEYNAME "system\currentcontrolset\services\tcpip\parameters"
                EXPLAIN !!Blank
                    VALUENAME "Default"
	   END POLICY
	   POLICY "system\currentcontrolset\services\eventlog\application\probe"
		KEYNAME "system\currentcontrolset\services\eventlog\application\probe"
		EXPLAIN !!Blank
		VALUENAME "Default"
            END POLICY
	   POLICY "system\currentcontrolset\services\eventlog\application\probe\eventmessagefile"
		KEYNAME "system\currentcontrolset\services\eventlog\application\probe\eventmessagefile"
		EXPLAIN !!Blank
		VALUENAME "Default"
            END POLICY
           POLICY "system\currentcontrolset\services\eventlog\application\probe\categorymessagefile"
                KEYNAME "system\currentcontrolset\services\eventlog\application\probe\categorymessagefile"
                EXPLAIN !!Blank
                    VALUENAME "Default"
	   END POLICY
	   POLICY "system\currentcontrolset\services\eventlog\application\probe\categorycount"
		KEYNAME "system\currentcontrolset\services\eventlog\application\probe\categorycount"
		EXPLAIN !!Blank
		VALUENAME "Default"
            END POLICY
	   POLICY "system\currentcontrolset\services\eventlog\application\probe\typessupported"
		KEYNAME "system\currentcontrolset\services\eventlog\application\probe\typessupported"
		EXPLAIN !!Blank
		VALUENAME "Default"
            END POLICY
        END CATEGORY
    END CATEGORY

[strings]
NJCISEDITS="NJC Info Sys GP Edits"
Registry="Registry Edits"
RegistryKeys="Create ADM-Defined Registry Keys"
Blank="For more information contact Neil J Cotton - NJC Information Solutions at njcinfosys@btinternet.com"

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant