Friday, December 5, 2014

windows 7 - Why does the Local Computer Policy editor not support Registry settings?



I am attempting to test some policies on my local PC, but I've found that after attempting to create registry keys utilizing the "Local Computer Policy" Group Policy Object Editor there is no Local Computer Policy\Computer Configuration\Windows Settings\Registry or Local Computer Policy\User Configuration\Windows Settings\Registry menus.



To verify, I went ahead & tested whether the GPO Editor on a Server 2008 R2 server would have the appropriate menu items--unsurprisingly, it does:




Group Policy Editor Differences



Any thoughts on why I am unable to set registry settings via the Local Computer GPO would be greatly appreciated--thanks!


Answer



The key word within your picture from the Server 2008 R2 interface is Preferences:



Group Policy Management Editor



This is the Group Policy Preferences functionality:





In Windows Server 2008 Microsoft introduced a Group Policy extension – Group Policy Preferences (GPP). GPP including registry settings, which allows you to add, remove or modify key values.




Ultimately, you have the ability to use Group Policy Preferences settings within the Windows Server 2008 R2 Group Policy Management Editor to propagate registry modifications throughout your Windows domain. However, there isn't an equivalent capability that exists within the gpedit.msc local group policy editor on a Windows 7 Enterprise workstation.



(Source: Add, modify and delete Registry keys using Group Policy)


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...