Add regkey to TS users HKCU

[Al Williams]

Windows Server 2003 SP2 TS.

I need to add a simple registry key to all my TS users HKCU hive. I googled
and found an old post from Vera and tried adding "regedit newreg.reg"
command to my login scripts but the users get a permission error - "Cannot
import
newreg.reg: Error accessing the registry." . It seems they aren't allowed
to add new keys to their HKCU hive (it doesn't work manually either unless
they are admins). Short of giving them all admin permissions until it's
done is there another way?

I know this must be simple but I can't find a solution that works. I'd
rather not get into GPO's or VBscript if I can help it...

Thanks

--
Allan Williams

 

[Soo Kuan Teo [MSFT]]

Re: Add regkey to TS users HKCU

I believe running regedit requires admin permissions.
Can you try using reg.exe ?
type reg.exe /? for its options.
Thanks
Soo Kuan


--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Al Williams" <donotreplydirect@usenewsgroup.com> wrote in message
news:OjLeewaGJHA.3576@TK2MSFTNGP03.phx.gbl...
> Windows Server 2003 SP2 TS.
>
> I need to add a simple registry key to all my TS users HKCU hive. I
> googled and found an old post from Vera and tried adding "regedit
> newreg.reg" command to my login scripts but the users get a permission
> error - "Cannot import
> newreg.reg: Error accessing the registry." . It seems they aren't allowed
> to add new keys to their HKCU hive (it doesn't work manually either unless
> they are admins). Short of giving them all admin permissions until it's
> done is there another way?
>
> I know this must be simple but I can't find a solution that works. I'd
> rather not get into GPO's or VBscript if I can help it...
>
> Thanks
>
> --
> Allan Williams
>
>
>
>

 

[Patrick Rouse]

Re: Add regkey to TS users HKCU

reg.exe is definitely the way to do this.


--
Patrick C. Rouse
Microsoft MVP - Terminal Server
Systems Consultant
Quest Software, Provision Networks Division
Virtual Client Solutions
http://www.provisionnetworks.com


"Soo Kuan Teo [MSFT]" wrote:

> I believe running regedit requires admin permissions.
> Can you try using reg.exe ?
> type reg.exe /? for its options.
> Thanks
> Soo Kuan
>
>
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Al Williams" <donotreplydirect@usenewsgroup.com> wrote in message
> news:OjLeewaGJHA.3576@TK2MSFTNGP03.phx.gbl...
> > Windows Server 2003 SP2 TS.
> >
> > I need to add a simple registry key to all my TS users HKCU hive. I
> > googled and found an old post from Vera and tried adding "regedit
> > newreg.reg" command to my login scripts but the users get a permission
> > error - "Cannot import
> > newreg.reg: Error accessing the registry." . It seems they aren't allowed
> > to add new keys to their HKCU hive (it doesn't work manually either unless
> > they are admins). Short of giving them all admin permissions until it's
> > done is there another way?
> >
> > I know this must be simple but I can't find a solution that works. I'd
> > rather not get into GPO's or VBscript if I can help it...
> >
> > Thanks
> >
> > --
> > Allan Williams
> >
> >
> >
> >
>
>

 

[Al Williams]

Re: Add regkey to TS users HKCU

So reg.exe doesn't need admin permissions like regedit? I will give it a
try.

Thanks to all.

--
Allan Williams



"Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
news:2169F50B-B075-42D7-94FD-88E6D0B0F32A@microsoft.com...
> reg.exe is definitely the way to do this.
>
>
> --
> Patrick C. Rouse
> Microsoft MVP - Terminal Server
> Systems Consultant
> Quest Software, Provision Networks Division
> Virtual Client Solutions
> http://www.provisionnetworks.com
>
>
> "Soo Kuan Teo [MSFT]" wrote:
>
>> I believe running regedit requires admin permissions.
>> Can you try using reg.exe ?
>> type reg.exe /? for its options.
>> Thanks
>> Soo Kuan
>>
>>
>> --
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "Al Williams" <donotreplydirect@usenewsgroup.com> wrote in message
>> news:OjLeewaGJHA.3576@TK2MSFTNGP03.phx.gbl...
>> > Windows Server 2003 SP2 TS.
>> >
>> > I need to add a simple registry key to all my TS users HKCU hive. I
>> > googled and found an old post from Vera and tried adding "regedit
>> > newreg.reg" command to my login scripts but the users get a permission
>> > error - "Cannot import
>> > newreg.reg: Error accessing the registry." . It seems they aren't
>> > allowed
>> > to add new keys to their HKCU hive (it doesn't work manually either
>> > unless
>> > they are admins). Short of giving them all admin permissions until
>> > it's
>> > done is there another way?
>> >
>> > I know this must be simple but I can't find a solution that works. I'd
>> > rather not get into GPO's or VBscript if I can help it...
>> >
>> > Thanks
>> >
>> > --
>> > Allan Williams
>> >
>> >
>> >
>> >
>>
>>

 

[Al Williams]

Re: Add regkey to TS users HKCU

Doesn't work - still get "ERROR: Access is denied. - just trying to add a
key to HKCU.

I think this has to do with running TS2003 in "Full Security" mode rather
than "Relaxed security".

Do I need to turn this off?

--
Allan Williams



"Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
news:2169F50B-B075-42D7-94FD-88E6D0B0F32A@microsoft.com...
> reg.exe is definitely the way to do this.
>
>
> --
> Patrick C. Rouse
> Microsoft MVP - Terminal Server
> Systems Consultant
> Quest Software, Provision Networks Division
> Virtual Client Solutions
> http://www.provisionnetworks.com
>
>
> "Soo Kuan Teo [MSFT]" wrote:
>
>> I believe running regedit requires admin permissions.
>> Can you try using reg.exe ?
>> type reg.exe /? for its options.
>> Thanks
>> Soo Kuan
>>
>>
>> --
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "Al Williams" <donotreplydirect@usenewsgroup.com> wrote in message
>> news:OjLeewaGJHA.3576@TK2MSFTNGP03.phx.gbl...
>> > Windows Server 2003 SP2 TS.
>> >
>> > I need to add a simple registry key to all my TS users HKCU hive. I
>> > googled and found an old post from Vera and tried adding "regedit
>> > newreg.reg" command to my login scripts but the users get a permission
>> > error - "Cannot import
>> > newreg.reg: Error accessing the registry." . It seems they aren't
>> > allowed
>> > to add new keys to their HKCU hive (it doesn't work manually either
>> > unless
>> > they are admins). Short of giving them all admin permissions until
>> > it's
>> > done is there another way?
>> >
>> > I know this must be simple but I can't find a solution that works. I'd
>> > rather not get into GPO's or VBscript if I can help it...
>> >
>> > Thanks
>> >
>> > --
>> > Allan Williams
>> >
>> >
>> >
>> >
>>
>>

 

[Patrick Rouse]

Re: Add regkey to TS users HKCU

Full Security does not add the members of the Terminal Server Users Group to
the Power Users Group like Relaxed Security does. If you value your
environment, NEVER, EVER put a TS in relaxed/legacy security mode.

You many just have restricted access to registry editing tools via GPO or
local policy. you could also try "regedit.exe /s regfile.reg", where the
settings you want to apply are in the regfile, that was exported via regedit.
The /s switch means silent.


--
Patrick C. Rouse
Microsoft MVP - Terminal Server
Systems Consultant
Quest Software, Provision Networks Division
Virtual Client Solutions
http://www.provisionnetworks.com


"Al Williams" wrote:

> Doesn't work - still get "ERROR: Access is denied. - just trying to add a
> key to HKCU.
>
> I think this has to do with running TS2003 in "Full Security" mode rather
> than "Relaxed security".
>
> Do I need to turn this off?
>
> --
> Allan Williams
>
>
>
> "Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
> news:2169F50B-B075-42D7-94FD-88E6D0B0F32A@microsoft.com...
> > reg.exe is definitely the way to do this.
> >
> >
> > --
> > Patrick C. Rouse
> > Microsoft MVP - Terminal Server
> > Systems Consultant
> > Quest Software, Provision Networks Division
> > Virtual Client Solutions
> > http://www.provisionnetworks.com
> >
> >
> > "Soo Kuan Teo [MSFT]" wrote:
> >
> >> I believe running regedit requires admin permissions.
> >> Can you try using reg.exe ?
> >> type reg.exe /? for its options.
> >> Thanks
> >> Soo Kuan
> >>
> >>
> >> --
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> "Al Williams" <donotreplydirect@usenewsgroup.com> wrote in message
> >> news:OjLeewaGJHA.3576@TK2MSFTNGP03.phx.gbl...
> >> > Windows Server 2003 SP2 TS.
> >> >
> >> > I need to add a simple registry key to all my TS users HKCU hive. I
> >> > googled and found an old post from Vera and tried adding "regedit
> >> > newreg.reg" command to my login scripts but the users get a permission
> >> > error - "Cannot import
> >> > newreg.reg: Error accessing the registry." . It seems they aren't
> >> > allowed
> >> > to add new keys to their HKCU hive (it doesn't work manually either
> >> > unless
> >> > they are admins). Short of giving them all admin permissions until
> >> > it's
> >> > done is there another way?
> >> >
> >> > I know this must be simple but I can't find a solution that works. I'd
> >> > rather not get into GPO's or VBscript if I can help it...
> >> >
> >> > Thanks
> >> >
> >> > --
> >> > Allan Williams
> >> >
> >> >
> >> >
> >> >
> >>
> >>
>
>
>

 

[Al Williams]

Re: Add regkey to TS users HKCU

The regedit method is what I tried first and it failed with permission error
as well.

As I understand it, login scripts are run with the permissions of the
current user so users would need permission to add keys to HKCU if my script
was to work. They don't seem to have these permissions however so how do I
change it?

I would have thought adding keys to the users own registry would be allowed
but apparently not by default...

--
Allan Williams



"Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
news:689D67D2-6210-4910-BD4E-068F74B0752C@microsoft.com...
> Full Security does not add the members of the Terminal Server Users Group
> to
> the Power Users Group like Relaxed Security does. If you value your
> environment, NEVER, EVER put a TS in relaxed/legacy security mode.
>
> You many just have restricted access to registry editing tools via GPO or
> local policy. you could also try "regedit.exe /s regfile.reg", where the
> settings you want to apply are in the regfile, that was exported via
> regedit.
> The /s switch means silent.
>
>
> --
> Patrick C. Rouse
> Microsoft MVP - Terminal Server
> Systems Consultant
> Quest Software, Provision Networks Division
> Virtual Client Solutions
> http://www.provisionnetworks.com
>
>
> "Al Williams" wrote:
>
>> Doesn't work - still get "ERROR: Access is denied. - just trying to add a
>> key to HKCU.
>>
>> I think this has to do with running TS2003 in "Full Security" mode rather
>> than "Relaxed security".
>>
>> Do I need to turn this off?
>>
>> --
>> Allan Williams
>>
>>
>>
>> "Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
>> news:2169F50B-B075-42D7-94FD-88E6D0B0F32A@microsoft.com...
>> > reg.exe is definitely the way to do this.
>> >
>> >
>> > --
>> > Patrick C. Rouse
>> > Microsoft MVP - Terminal Server
>> > Systems Consultant
>> > Quest Software, Provision Networks Division
>> > Virtual Client Solutions
>> > http://www.provisionnetworks.com
>> >
>> >
>> > "Soo Kuan Teo [MSFT]" wrote:
>> >
>> >> I believe running regedit requires admin permissions.
>> >> Can you try using reg.exe ?
>> >> type reg.exe /? for its options.
>> >> Thanks
>> >> Soo Kuan
>> >>
>> >>
>> >> --
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >> "Al Williams" <donotreplydirect@usenewsgroup.com> wrote in message
>> >> news:OjLeewaGJHA.3576@TK2MSFTNGP03.phx.gbl...
>> >> > Windows Server 2003 SP2 TS.
>> >> >
>> >> > I need to add a simple registry key to all my TS users HKCU hive. I
>> >> > googled and found an old post from Vera and tried adding "regedit
>> >> > newreg.reg" command to my login scripts but the users get a
>> >> > permission
>> >> > error - "Cannot import
>> >> > newreg.reg: Error accessing the registry." . It seems they aren't
>> >> > allowed
>> >> > to add new keys to their HKCU hive (it doesn't work manually either
>> >> > unless
>> >> > they are admins). Short of giving them all admin permissions until
>> >> > it's
>> >> > done is there another way?
>> >> >
>> >> > I know this must be simple but I can't find a solution that works.
>> >> > I'd
>> >> > rather not get into GPO's or VBscript if I can help it...
>> >> >
>> >> > Thanks
>> >> >
>> >> > --
>> >> > Allan Williams
>> >> >
>> >> >
>> >> >
>> >> >
>> >>
>> >>
>>
>>
>>

 

[Patrick Rouse]

Re: Add regkey to TS users HKCU

Users typically have owner permissions to their hive, so I suspect that the
error message is that users are not being allowed to use the reg.exe or
regedit.exe. Can you verify that a user can open one of these programs?

http://support.microsoft.com/kb/831787


--
Patrick C. Rouse
Microsoft MVP - Terminal Server
Systems Consultant
Quest Software, Provision Networks Division
Virtual Client Solutions
http://www.provisionnetworks.com


"Al Williams" wrote:

> The regedit method is what I tried first and it failed with permission error
> as well.
>
> As I understand it, login scripts are run with the permissions of the
> current user so users would need permission to add keys to HKCU if my script
> was to work. They don't seem to have these permissions however so how do I
> change it?
>
> I would have thought adding keys to the users own registry would be allowed
> but apparently not by default...
>
> --
> Allan Williams
>
>
>
> "Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
> news:689D67D2-6210-4910-BD4E-068F74B0752C@microsoft.com...
> > Full Security does not add the members of the Terminal Server Users Group
> > to
> > the Power Users Group like Relaxed Security does. If you value your
> > environment, NEVER, EVER put a TS in relaxed/legacy security mode.
> >
> > You many just have restricted access to registry editing tools via GPO or
> > local policy. you could also try "regedit.exe /s regfile.reg", where the
> > settings you want to apply are in the regfile, that was exported via
> > regedit.
> > The /s switch means silent.
> >
> >
> > --
> > Patrick C. Rouse
> > Microsoft MVP - Terminal Server
> > Systems Consultant
> > Quest Software, Provision Networks Division
> > Virtual Client Solutions
> > http://www.provisionnetworks.com
> >
> >
> > "Al Williams" wrote:
> >
> >> Doesn't work - still get "ERROR: Access is denied. - just trying to add a
> >> key to HKCU.
> >>
> >> I think this has to do with running TS2003 in "Full Security" mode rather
> >> than "Relaxed security".
> >>
> >> Do I need to turn this off?
> >>
> >> --
> >> Allan Williams
> >>
> >>
> >>
> >> "Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
> >> news:2169F50B-B075-42D7-94FD-88E6D0B0F32A@microsoft.com...
> >> > reg.exe is definitely the way to do this.
> >> >
> >> >
> >> > --
> >> > Patrick C. Rouse
> >> > Microsoft MVP - Terminal Server
> >> > Systems Consultant
> >> > Quest Software, Provision Networks Division
> >> > Virtual Client Solutions
> >> > http://www.provisionnetworks.com
> >> >
> >> >
> >> > "Soo Kuan Teo [MSFT]" wrote:
> >> >
> >> >> I believe running regedit requires admin permissions.
> >> >> Can you try using reg.exe ?
> >> >> type reg.exe /? for its options.
> >> >> Thanks
> >> >> Soo Kuan
> >> >>
> >> >>
> >> >> --
> >> >> This posting is provided "AS IS" with no warranties, and confers no
> >> >> rights.
> >> >>
> >> >> "Al Williams" <donotreplydirect@usenewsgroup.com> wrote in message
> >> >> news:OjLeewaGJHA.3576@TK2MSFTNGP03.phx.gbl...
> >> >> > Windows Server 2003 SP2 TS.
> >> >> >
> >> >> > I need to add a simple registry key to all my TS users HKCU hive. I
> >> >> > googled and found an old post from Vera and tried adding "regedit
> >> >> > newreg.reg" command to my login scripts but the users get a
> >> >> > permission
> >> >> > error - "Cannot import
> >> >> > newreg.reg: Error accessing the registry." . It seems they aren't
> >> >> > allowed
> >> >> > to add new keys to their HKCU hive (it doesn't work manually either
> >> >> > unless
> >> >> > they are admins). Short of giving them all admin permissions until
> >> >> > it's
> >> >> > done is there another way?
> >> >> >
> >> >> > I know this must be simple but I can't find a solution that works.
> >> >> > I'd
> >> >> > rather not get into GPO's or VBscript if I can help it...
> >> >> >
> >> >> > Thanks
> >> >> >
> >> >> > --
> >> >> > Allan Williams
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

 

[Jeff Pitsch]

Re: Add regkey to TS users HKCU

How about checking group policy to see if they have been revoked rights
to modify the registry.....

Jeff Pitsch
Microsoft MVP - Terminal Services

Patrick Rouse wrote:
> Users typically have owner permissions to their hive, so I suspect that the
> error message is that users are not being allowed to use the reg.exe or
> regedit.exe. Can you verify that a user can open one of these programs?
>
> http://support.microsoft.com/kb/831787
>
>

 

[Al Williams]

Re: Add regkey to TS users HKCU

That's the issue, the users don't have permission to the
HKCU/software/policy keys I want to write, checked with regedit. This is a
one-time change, so I may just make the users admins for the day (without
telling them) and when they login lock it back up.

Unless there is an easier way of simply adding a new key to every users
registry from the TS console.

--
Allan Williams



"Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
news:863414F1-DD38-4A6F-B1B0-DEBE4AB92014@microsoft.com...
> Users typically have owner permissions to their hive, so I suspect that
> the
> error message is that users are not being allowed to use the reg.exe or
> regedit.exe. Can you verify that a user can open one of these programs?
>
> http://support.microsoft.com/kb/831787
>
>
> --
> Patrick C. Rouse
> Microsoft MVP - Terminal Server
> Systems Consultant
> Quest Software, Provision Networks Division
> Virtual Client Solutions
> http://www.provisionnetworks.com
>
>
> "Al Williams" wrote:
>
>> The regedit method is what I tried first and it failed with permission
>> error
>> as well.
>>
>> As I understand it, login scripts are run with the permissions of the
>> current user so users would need permission to add keys to HKCU if my
>> script
>> was to work. They don't seem to have these permissions however so how do
>> I
>> change it?
>>
>> I would have thought adding keys to the users own registry would be
>> allowed
>> but apparently not by default...
>>
>> --
>> Allan Williams
>>
>>
>>
>> "Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in message
>> news:689D67D2-6210-4910-BD4E-068F74B0752C@microsoft.com...
>> > Full Security does not add the members of the Terminal Server Users
>> > Group
>> > to
>> > the Power Users Group like Relaxed Security does. If you value your
>> > environment, NEVER, EVER put a TS in relaxed/legacy security mode.
>> >
>> > You many just have restricted access to registry editing tools via GPO
>> > or
>> > local policy. you could also try "regedit.exe /s regfile.reg", where
>> > the
>> > settings you want to apply are in the regfile, that was exported via
>> > regedit.
>> > The /s switch means silent.
>> >
>> >
>> > --
>> > Patrick C. Rouse
>> > Microsoft MVP - Terminal Server
>> > Systems Consultant
>> > Quest Software, Provision Networks Division
>> > Virtual Client Solutions
>> > http://www.provisionnetworks.com
>> >
>> >
>> > "Al Williams" wrote:
>> >
>> >> Doesn't work - still get "ERROR: Access is denied. - just trying to
>> >> add a
>> >> key to HKCU.
>> >>
>> >> I think this has to do with running TS2003 in "Full Security" mode
>> >> rather
>> >> than "Relaxed security".
>> >>
>> >> Do I need to turn this off?
>> >>
>> >> --
>> >> Allan Williams
>> >>
>> >>
>> >>
>> >> "Patrick Rouse" <PatrickRouse@discussions.microsoft.com> wrote in
>> >> message
>> >> news:2169F50B-B075-42D7-94FD-88E6D0B0F32A@microsoft.com...
>> >> > reg.exe is definitely the way to do this.
>> >> >
>> >> >
>> >> > --
>> >> > Patrick C. Rouse
>> >> > Microsoft MVP - Terminal Server
>> >> > Systems Consultant
>> >> > Quest Software, Provision Networks Division
>> >> > Virtual Client Solutions
>> >> > http://www.provisionnetworks.com
>> >> >
>> >> >
>> >> > "Soo Kuan Teo [MSFT]" wrote:
>> >> >
>> >> >> I believe running regedit requires admin permissions.
>> >> >> Can you try using reg.exe ?
>> >> >> type reg.exe /? for its options.
>> >> >> Thanks
>> >> >> Soo Kuan
>> >> >>
>> >> >>
>> >> >> --
>> >> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> >> rights.
>> >> >>
>> >> >> "Al Williams" <donotreplydirect@usenewsgroup.com> wrote in message
>> >> >> news:OjLeewaGJHA.3576@TK2MSFTNGP03.phx.gbl...
>> >> >> > Windows Server 2003 SP2 TS.
>> >> >> >
>> >> >> > I need to add a simple registry key to all my TS users HKCU hive.
>> >> >> > I
>> >> >> > googled and found an old post from Vera and tried adding "regedit
>> >> >> > newreg.reg" command to my login scripts but the users get a
>> >> >> > permission
>> >> >> > error - "Cannot import
>> >> >> > newreg.reg: Error accessing the registry." . It seems they
>> >> >> > aren't
>> >> >> > allowed
>> >> >> > to add new keys to their HKCU hive (it doesn't work manually
>> >> >> > either
>> >> >> > unless
>> >> >> > they are admins). Short of giving them all admin permissions
>> >> >> > until
>> >> >> > it's
>> >> >> > done is there another way?
>> >> >> >
>> >> >> > I know this must be simple but I can't find a solution that
>> >> >> > works.
>> >> >> > I'd
>> >> >> > rather not get into GPO's or VBscript if I can help it...
>> >> >> >
>> >> >> > Thanks
>> >> >> >
>> >> >> > --
>> >> >> > Allan Williams
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>

 

[Jeff Pitsch]

Re: Add regkey to TS users HKCU

Anything under that key is controlled by Group Policy. Why would you
want to manually edit those entries? So yes, there is a much easier way
of adding those entries.

Jeff Pitsch
Microsoft MVP - Terminal Services


Al Williams wrote:
> That's the issue, the users don't have permission to the
> HKCU/software/policy keys I want to write, checked with regedit. This is a
> one-time change, so I may just make the users admins for the day (without
> telling them) and when they login lock it back up.
>
> Unless there is an easier way of simply adding a new key to every users
> registry from the TS console.
>

 

[Al Williams]

Re: Add regkey to TS users HKCU

OK, I give up - I'll look for the GP settings for that. Just need the ADM
template IIRC...

--
Allan Williams



"Jeff Pitsch" <jeff.pitsch.fake@jeffpitschconsulting.com> wrote in message
news:uNmYJvPHJHA.4272@TK2MSFTNGP03.phx.gbl...
> Anything under that key is controlled by Group Policy. Why would you want
> to manually edit those entries? So yes, there is a much easier way of
> adding those entries.
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
>
> Al Williams wrote:
>> That's the issue, the users don't have permission to the
>> HKCU/software/policy keys I want to write, checked with regedit. This is
>> a one-time change, so I may just make the users admins for the day
>> (without telling them) and when they login lock it back up.
>>
>> Unless there is an easier way of simply adding a new key to every users
>> registry from the TS console.
>>

 

[Jeff Pitsch]

Re: Add regkey to TS users HKCU

What exactly are you trying to do? What setting are you looking for?

Jeff Pitsch
Microsoft MVP - Terminal Services

Al Williams wrote:
> OK, I give up - I'll look for the GP settings for that. Just need the ADM
> template IIRC...
>

 

[Al Williams]

Re: Add regkey to TS users HKCU

I'm trying to use an Exchange "Outlook Security Settings" folder for
attachment security to block ZIP files for some of our users.

http://support.microsoft.com/kb/885682

It's works on all the normal PC's on the LAN but I can't get it to work on
the TS clients. I added the GP and confirmed that the regkey is set for the
TS user (that works now) but Outlook 2003 running in the TS session justs
ignores the setting and lets the ZIP's through. Not sure if this a TS issue
or not...

--
Allan Williams



"Jeff Pitsch" <jeff.pitsch.fake@jeffpitschconsulting.com> wrote in message
news:eSqmplYHJHA.3456@TK2MSFTNGP04.phx.gbl...
> What exactly are you trying to do? What setting are you looking for?
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
> Al Williams wrote:
>> OK, I give up - I'll look for the GP settings for that. Just need the
>> ADM template IIRC...
>>

 

[Jeff Pitsch]

Re: Add regkey to TS users HKCU

Have you run an RSOP to confirm that the setting is actually being applied?

Jeff Pitsch
Microsoft MVP - Terminal Services

Al Williams wrote:
> I'm trying to use an Exchange "Outlook Security Settings" folder for
> attachment security to block ZIP files for some of our users.
>
> http://support.microsoft.com/kb/885682
>
> It's works on all the normal PC's on the LAN but I can't get it to work on
> the TS clients. I added the GP and confirmed that the regkey is set for the
> TS user (that works now) but Outlook 2003 running in the TS session justs
> ignores the setting and lets the ZIP's through. Not sure if this a TS issue
> or not...
>

 

[Al Williams]

Re: Add regkey to TS users HKCU

Yes, the setting was there.

Found my issue anyways. The form I used to create the original "Outlook
Security Settings" folder needed to be updated to the latest version.
Nothing to do with TS in the end...

Thanks a lot.

--
Allan Williams



"Jeff Pitsch" <jeff.pitsch.fake@jeffpitschconsulting.com> wrote in message
news:ulvVrQ0HJHA.3960@TK2MSFTNGP04.phx.gbl...
> Have you run an RSOP to confirm that the setting is actually being
> applied?
>
> Jeff Pitsch
> Microsoft MVP - Terminal Services
>
> Al Williams wrote:
>> I'm trying to use an Exchange "Outlook Security Settings" folder for
>> attachment security to block ZIP files for some of our users.
>>
>> http://support.microsoft.com/kb/885682
>>
>> It's works on all the normal PC's on the LAN but I can't get it to work
>> on the TS clients. I added the GP and confirmed that the regkey is set
>> for the TS user (that works now) but Outlook 2003 running in the TS
>> session justs ignores the setting and lets the ZIP's through. Not sure
>> if this a TS issue or not...
>>