You could use a login script using reg.exe, but GPO is the best way. Tidy them up, yes, but dismissing them as a management tool is not good. I save a hell of a lot of time and grief with GPOs.
Sent from my POS BlackBerry wireless device, which may wipe itself at any moment -----Original Message----- From: "Bernard, Norm" <[email protected]> Date: Thu, 8 Sep 2011 11:10:27 To: NT System Admin Issues<[email protected]> Reply-To: "NT System Admin Issues" <[email protected]>Subject: HKCU permissions change via GPO? Hello Folks What I need to do is change the permissions on all system's HKCU (or all user hives if possible!). Specifically I need to change HKCU\Software\Policies\ permissions to allow current user the right to create/edit sub keys/values I am currently trying to use SCCM to push out a registry fix for Excel 2003 (The reg file contains the following, and I have created an SCCM package that TRIED to apply the registry fix, but it appears that there is a permissions issue - confirmed by manually trying to apply the reg file at the local machine with the logged on user account: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security] [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Excel\Security\FileValidation] "EnableOnLoad"=dword:00000000 Any help would be appreciated! Kindest Regards, ________________________ Norm Bernard, Systems Administrator / Administrateur Système tel/tél: 604-221-3023| facsimile/télécopieur: 604-221-3001 | [email protected] NRC Institute for Fuel Cell Innovation | 4250 Wesbrook Mall, Vancouver, B.C. V6T 1W5 Institut d'innovation en piles à combustible du CNRC | 4250 Wesbrook Mall, Vancouver (C.-B.) V6T 1W5 Government of Canada | Gouvernement du Canada ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
