Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Recently I have added registry keys in active directory and I need to push them via group policy instead of going to each PC to apply the new ones.
How can I push new registry keys (not modify existing ones) via group policy?

Note: I'm using Windows Server 2003 64 bit and my clients are running Windows XP Professional.

share|improve this question
add comment

5 Answers

There is no built-in feature in Windows Server 2003 GPOs to configure custom Registry keys.

You can either use a startup/logon script to import a .REG file, or create a custom administrative template which will act on the keys you need to modify.

share|improve this answer
    
Massimo could you please read down what I faced the problem! and how can I create a custom administrative template?Thanks –  AAA-Super Aug 5 '11 at 13:16
add comment
up vote 2 down vote accepted

I solved but I didn't understand how it works!.I have windows 7 pro and I have installed administrative tools of 2008 in group policy management I created new policy so inside group policy management of windows 2008 there are new features for registry Computer Configuration --> Preferences --> Windows setting --> Registry from there you can push new policies but don't ask how I can use this feature and my windows server is 2003! if any one can explain to me?

share|improve this answer
    
You're using something called Group Policy Preferences (GPP) which is an extension to regular Group Policy. Your target computers will only receive the settings if they have the GPP update installed. microsoft.com/download/en/details.aspx?id=24449 –  Nic Aug 11 '11 at 7:06
add comment

Add this to your netlogon folder then create a logon gpo to run the batch. Change the registry key and location and name of file to whatever you call them.

REG QUERY hkcu\software\microsoft\windows\currentversion\run /v restart_sticky_notes
IF %errorlevel%==0 GOTO skip_reg_inport
regedit.exe /s \\server\registry_folder\regfile.reg
:skip_reg_inport
share|improve this answer
    
Well it seems i have another problem why i didn't see netlogon? in this case what is have to do? thanks for your help –  AAA-Super Aug 5 '11 at 13:53
    
The netlogon folder is on any of your domain controllers default share. If you're missing that, that's a whole other issue and would be best addressed in another question. You basicly want to drop your script and your .reg file into a shared folder so all of your workstations can access it. Then make sure to point to those locations in your GPO logon script, and the regedit import. –  Nixphoe Aug 5 '11 at 14:01
1  
So I have to write another question to explain where netlogon share folder disappeared.Thanks alot for your support and i will come back later –  AAA-Super Aug 5 '11 at 15:08
add comment

What I would do (Personal Experience only) is the following:

Export the registry settings. Log On / Log Off user settings for each user. Under the logon node we use a regsomething.exe which calls the registry file with a silent switch in front.

Use a famous button called show files, and then drop the editreg.reg fil into sysvol.

Voila.

Good luck have fun!

share|improve this answer
    
Thanks Maclovin but I had weird message after I put the key inside show files of user configuration it ask the user for apply the key and if the user press yes message said cannot (import......error accessing the registry) it's normal because they have user rights and users not authorized to change something. It's possible to make silent applying? –  AAA-Super Aug 5 '11 at 12:56
    
But the way i didn't understand what you said about regsomething.exe? –  AAA-Super Aug 5 '11 at 12:57
add comment

There is a good tutorial available for doing this here. It involves adding the registry change to a logon script.

share|improve this answer
    
I have saw the part spoke about the Easier Way but I didn't understand if I have to copy regedit.exe to user/scripts/logon or not? and how can I tell it where is my registry key.reg at the same place of regedit.exe?Thanks –  AAA-Super Aug 5 '11 at 14:00
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.