GPO and Registry Preferences HELP!

Discussion in 'Windows Server Systems' started by fixitchris, Oct 31, 2006.

  1. fixitchris

    fixitchris OSNN Junior Addict

    Messages:
    12
    I was wondering if you know what the causes of “registry preferences” not being applied could be. I am trying to disable CDROM and USBSTOR devices from loading by changing their startup value to 4, which is Disabled.

    I imported the attached ADM file into the GPO at the user level,no effect, then at the domain level…..but it has no effect whatsoever.

    What’s up?

    Also… when I removed the ADM file from the admin templates at the user GPO, RSOP is bugging me about the ADM file not being present on SYSVOL…. How can this be cured?

    thanks

    Code:
    CLASS MACHINE
    
    CATEGORY !!category
     CATEGORY !!categoryname
      POLICY !!policynameusb
       KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
       EXPLAIN !!explaintextusb
         PART !!labeltextusb DROPDOWNLIST REQUIRED
     
           VALUENAME "Start"
           ITEMLIST
            NAME !!Disabled VALUE NUMERIC 3 DEFAULT
            NAME !!Enabled VALUE NUMERIC 4
           END ITEMLIST
         END PART
       END POLICY
      POLICY !!policynamecd
       KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
       EXPLAIN !!explaintextcd
         PART !!labeltextcd DROPDOWNLIST REQUIRED
     
           VALUENAME "Start"
           ITEMLIST
            NAME !!Disabled VALUE NUMERIC 1 DEFAULT
            NAME !!Enabled VALUE NUMERIC 4
           END ITEMLIST
         END PART
       END POLICY
      POLICY !!policynameflpy
       KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
       EXPLAIN !!explaintextflpy
         PART !!labeltextflpy DROPDOWNLIST REQUIRED
     
           VALUENAME "Start"
           ITEMLIST
            NAME !!Disabled VALUE NUMERIC 3 DEFAULT
            NAME !!Enabled VALUE NUMERIC 4
           END ITEMLIST
         END PART
       END POLICY
      POLICY !!policynamels120
       KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
       EXPLAIN !!explaintextls120
         PART !!labeltextls120 DROPDOWNLIST REQUIRED
     
           VALUENAME "Start"
           ITEMLIST
            NAME !!Disabled VALUE NUMERIC 3 DEFAULT
            NAME !!Enabled VALUE NUMERIC 4
           END ITEMLIST
         END PART
       END POLICY
     END CATEGORY
    END CATEGORY
    
     
    [strings]
    category="Custom Policy Settings"
    categoryname="Restrict Drives"
    policynameusb="Disable USB"
    policynamecd="Disable CD-ROM"
    policynameflpy="Disable Floppy"
    policynamels120="Disable High Capacity Floppy"
    explaintextusb="Disables the computers USB ports by disabling the usbstor.sys driver"
    explaintextcd="Disables the computers CD-ROM Drive by disabling the cdrom.sys driver"
    explaintextflpy="Disables the computers Floppy Drive by disabling the flpydisk.sys driver"
    explaintextls120="Disables the computers High Capacity Floppy Drive by disabling the sfloppy.sys driver"
    labeltextusb="Disable USB Ports"
    labeltextcd="Disable CD-ROM Drive"
    labeltextflpy="Disable Floppy Drive"
    labeltextls120="Disable High Capacity Floppy Drive"
    Enabled="Enabled"
    Disabled="Disabled"
     
  2. fitz

    fitz Just Floating Along Staff Member Political User Folding Team

    Messages:
    4,076
    Location:
    Chicagoland
    Well, not too familiar with what you are trying to do, but those policies wouldn't be applied on the user settings.. they would be computer settings.

    Secondly, if you want to make registry changes via GPO, may I suggest using Desktop Standards PolicyMaker Registry Extention
     
  3. fixitchris

    fixitchris OSNN Junior Addict

    Messages:
    12
    i got it to work.. i applied it to Domain again. I can't apply it to computers because my computer container is a CN not an OU.

    :)

    thanks
     
  4. Mooz

    Mooz Moozically Con~foozed

    Messages:
    126
    Location:
    UK
    DESKTOP STANDARD HAS NOW BEEN BOUGHT BY MICROSOFT. please do not buy it unless you are ready for it to be discontinued pre longhorn (i almost fell into this trap_ ) ... i now use desktop authority (script logic) which works over well and does all that DS did and more to boot.

    D
     
  5. fitz

    fitz Just Floating Along Staff Member Political User Folding Team

    Messages:
    4,076
    Location:
    Chicagoland
    The registry extention is a free product from them. Nothing to buy.