I’ve done something like this with Group Policy Preferences, but I am not certain if I would recommend it or not.
What I did was make a GPP that applied the desired setting along with a flag. Then I only apply this to users where the flag is not present. What I like about this idea is that it is centrally located – so if I need to remove it, I just delete the policy. If I need to change it I change it in the GPO. I don’t like the idea of the setting being out there on several thousand machines with only difficult options available for modifying the setting. It also has the advantage of being able to set different defaults for different users even on the same machine. The part I don’t like is that it feels Rube Goldbergy. It is a little fiddly. It’s like If HKCU\something\something\GPPValueApplied <> 1 then apply these settings HKCU\something\something\somevalue Blah HKCU\something\something\Gppvaluepplied 1 The flag makes it so the registry change will only apply if it has not applied before. From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Wednesday, November 26, 2014 12:53 PM To: [email protected] Subject: Re: [MDT-OSD] RunOnce for Each User If your using MDT, use ZTI-DefaultUser http://blogs.technet.com/b/deploymentguys/archive/2008/06/06/useful-script-number-5-adjusting-the-default-user-registry-hive.aspx Sent from Windows Mail From: Marcum, John<mailto:[email protected]> Sent: Tuesday, November 25, 2014 17:12 To: [email protected]<mailto:[email protected]> I didn't get the expected results. How can I verify that the key is in the default user runonce? From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Niall Brady Sent: Tuesday, November 25, 2014 12:19 PM To: [email protected]<mailto:[email protected]> Subject: Re: [MDT-OSD] RunOnce for Each User something like thius http://www.windows-noob.com/forums/index.php?/topic/10471-customization-of-internet-explorer-9-hkcu-key-problems/ On Tue, Nov 25, 2014 at 7:17 PM, Niall Brady <[email protected]<mailto:[email protected]>> wrote: copy it to the default user account as a run once reg key entry. On Tue, Nov 25, 2014 at 7:04 PM, Marcum, John <[email protected]<mailto:[email protected]>> wrote: I have a script that I need to run once for each user at first logon. How would I set that up in my TS? The script will be local on the machine. ________________________________ John Marcum MCITP, MCTS, MCSA Desktop Architect Bradley Arant Boult Cummings LLP ________________________________ [H_Logo] ________________________________ Confidentiality Notice: This e-mail is from a law firm and may be protected by the attorney-client or work product privileges. If you have received this message in error, please notify the sender by replying to this e-mail and then delete it from your computer. ________________________________ Confidentiality Notice: This e-mail is from a law firm and may be protected by the attorney-client or work product privileges. If you have received this message in error, please notify the sender by replying to this e-mail and then delete it from your computer. ________________________________ Confidentiality Notice: This e-mail is from a law firm and may be protected by the attorney-client or work product privileges. If you have received this message in error, please notify the sender by replying to this e-mail and then delete it from your computer. ________________________________ Notice: This UI Health Care e-mail (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is confidential and may be legally privileged. If you are not the intended recipient, you are hereby notified that any retention, dissemination, distribution, or copying of this communication is strictly prohibited. Please reply to the sender that you have received the message in error, then delete it. Thank you. ________________________________
