prathapml Posted January 15, 2005 Share Posted January 15, 2005 If you have used Group Policy editor on win2k/XP/2k3, you must have seen so many fantastically useful settings there, and thought of doing it unattended. But I've always seen only INFs to be applied by the secedit tool at command-line - which is not a very exciting idea.Instead, just run gpedit.msc, and go to the option you want to set in it.1. Disable it - so that the key is set in registry.2. Take a snapshot of your registry using regshot.3. Now enable the option you want.4. Take a 2nd snapshot with regshot.5. Now ask regshot to "Compare" the two, and it will throw up a text file that shows all modified keys in their "before" and "after" forms.6. There will be many keys listed - including those that are not related to what you want. Its easy enough for you to identify the right ones and take the "after" form. If the key shown is a per-user setting, it will have the SID before it - just shorten that to HKCU.7. Now put this key in your regtweaks that you apply during uA setup.Enjoy!How to run the policy editor?Start >> Run >> gpedit.mscWhere is regshot?link to download Link to comment Share on other sites More sharing options...
Yzöwl Posted January 15, 2005 Share Posted January 15, 2005 Additionally, I did post an attachment containing a stack of commented policy settings, already in reg format, in the Registry Tweaks Thread recently, for your perusal. Link to comment Share on other sites More sharing options...
prathapml Posted January 15, 2005 Author Share Posted January 15, 2005 More to add!Microsoft's own documentation, updated for SP2: Check out this Excel file, it directly has all the reg changes that "gpedit.msc" (group policy editor) makes - link. Link to comment Share on other sites More sharing options...
Wraith Posted January 16, 2005 Share Posted January 16, 2005 More to add!Microsoft's own documentation, updated for SP2: Check out this Excel file, it directly has all the reg changes that "gpedit.msc" (group policy editor) makes - link.Now this is DEFINITELY useful... Link to comment Share on other sites More sharing options...
durex Posted January 16, 2005 Share Posted January 16, 2005 Short of the obvious admin stuff that would be useful in a corporate environment, what are a couple things you guys use this for on your personal pcs? Link to comment Share on other sites More sharing options...
grimman Posted January 16, 2005 Share Posted January 16, 2005 That's one of the things I do (list of drives on the left hand side), and like prathapml I do it with registry settings identified via the same method he uses. Link to comment Share on other sites More sharing options...
durex Posted January 17, 2005 Share Posted January 17, 2005 I use the places reg tweak for that... anyone else have 'personal workstation' uses for this stuff? Link to comment Share on other sites More sharing options...
nakira Posted January 17, 2005 Share Posted January 17, 2005 @prathapml: Nice one Link to comment Share on other sites More sharing options...
Dizzy Posted January 22, 2005 Share Posted January 22, 2005 I've just browsed through the xls file and there are things in there that doesn't have a registry entry (eg. password policy, account lockout policy etc.). Was looking forward to having everything in regtweaks. Looks like those security templates are still king if you want total security settings made easy. Link to comment Share on other sites More sharing options...
prathapml Posted June 23, 2007 Author Share Posted June 23, 2007 http://www.microsoft.com/downloads/details...;displaylang=enThe above links to an updated xls file. Group Policy settings in reg form, for vista. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now