We are trying hard to get away from GPO's as the previous AD guy had over 350 separate GPO's :( I've been trying to clean them up for months now.
Kindest Regards, ________________________ Norm Bernard, Systems Administrator / Administrateur Système tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | [email protected] NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada From: Damien Solodow [mailto:[email protected]] Sent: Thursday, September 08, 2011 11:12 AM To: NT System Admin Issues Subject: RE: HKCU permissions change via GPO? You'd be better off using the Excel ADM file in the GPO to make that change directly. :) Good rule of thumb is if it's under Software\Policies, it's configurable via a GPO with an ADM file. :) DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE From: Bernard, Norm [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Thursday, September 08, 2011 2:10 PM To: NT System Admin Issues Subject: HKCU permissions change via GPO? Hello Folks What I need to do is change the permissions on all system's HKCU (or all user hives if possible!). Specifically I need to change HKCU\Software\Policies\ permissions to allow current user the right to create/edit sub keys/values I am currently trying to use SCCM to push out a registry fix for Excel 2003 (The reg file contains the following, and I have created an SCCM package that TRIED to apply the registry fix, but it appears that there is a permissions issue - confirmed by manually trying to apply the reg file at the local machine with the logged on user account: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security\FileValidation] "EnableOnLoad"=dword:00000000 Any help would be appreciated! Kindest Regards, ________________________ Norm Bernard, Systems Administrator / Administrateur Système tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | [email protected]<mailto:[email protected]> NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
