GPO and Registry Preferences HELP!

fixitchris · October 31st, 2006

I was wondering if you know what the causes of “registry preferences” not being applied could be. I am trying to disable CDROM and USBSTOR devices from loading by changing their startup value to 4, which is Disabled.

I imported the attached ADM file into the GPO at the user level,no effect, then at the domain level…..but it has no effect whatsoever.

What’s up?

Also… when I removed the ADM file from the admin templates at the user GPO, RSOP is bugging me about the ADM file not being present on SYSVOL…. How can this be cured?

thanks

Code:

CLASS MACHINE

CATEGORY !!category
 CATEGORY !!categoryname
  POLICY !!policynameusb
   KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
   EXPLAIN !!explaintextusb
     PART !!labeltextusb DROPDOWNLIST REQUIRED
 
       VALUENAME "Start"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 3 DEFAULT
        NAME !!Enabled VALUE NUMERIC 4
       END ITEMLIST
     END PART
   END POLICY
  POLICY !!policynamecd
   KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
   EXPLAIN !!explaintextcd
     PART !!labeltextcd DROPDOWNLIST REQUIRED
 
       VALUENAME "Start"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 1 DEFAULT
        NAME !!Enabled VALUE NUMERIC 4
       END ITEMLIST
     END PART
   END POLICY
  POLICY !!policynameflpy
   KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
   EXPLAIN !!explaintextflpy
     PART !!labeltextflpy DROPDOWNLIST REQUIRED
 
       VALUENAME "Start"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 3 DEFAULT
        NAME !!Enabled VALUE NUMERIC 4
       END ITEMLIST
     END PART
   END POLICY
  POLICY !!policynamels120
   KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
   EXPLAIN !!explaintextls120
     PART !!labeltextls120 DROPDOWNLIST REQUIRED
 
       VALUENAME "Start"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 3 DEFAULT
        NAME !!Enabled VALUE NUMERIC 4
       END ITEMLIST
     END PART
   END POLICY
 END CATEGORY
END CATEGORY

 
[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the computers USB ports by disabling the usbstor.sys driver"
explaintextcd="Disables the computers CD-ROM Drive by disabling the cdrom.sys driver"
explaintextflpy="Disables the computers Floppy Drive by disabling the flpydisk.sys driver"
explaintextls120="Disables the computers High Capacity Floppy Drive by disabling the sfloppy.sys driver"
labeltextusb="Disable USB Ports"
labeltextcd="Disable CD-ROM Drive"
labeltextflpy="Disable Floppy Drive"
labeltextls120="Disable High Capacity Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"

**fitz** · October 31st, 2006

Well, not too familiar with what you are trying to do, but those policies wouldn't be applied on the user settings.. they would be computer settings.

Secondly, if you want to make registry changes via GPO, may I suggest using Desktop Standards PolicyMaker Registry Extention

fixitchris · October 31st, 2006

i got it to work.. i applied it to Domain again. I can't apply it to computers because my computer container is a CN not an OU.

thanks

Mooz · October 31st, 2006

DESKTOP STANDARD HAS NOW BEEN BOUGHT BY MICROSOFT. please do not buy it unless you are ready for it to be discontinued pre longhorn (i almost fell into this trap_ ) ... i now use desktop authority (script logic) which works over well and does all that DS did and more to boot.

D

**fitz** · October 31st, 2006

The registry extention is a free product from them. Nothing to buy.

October 31st, 2006	Top \| #2
fitz *XPista7eopardix Joined: April 2004 Location: Chicagoland Posts: 4,028 Reputation: 2947 Power: 168**	Re: GPO and Registry Preferences HELP! Well, not too familiar with what you are trying to do, but those policies wouldn't be applied on the user settings.. they would be computer settings. Secondly, if you want to make registry changes via GPO, may I suggest using Desktop Standards PolicyMaker Registry Extention Hee-hee! Evil makes my buttocks tingle.

October 31st, 2006	Top \| #3
fixitchris OSNN Junior Addict Joined: October 2006 Posts: 12 Reputation: 0 Power: 68	Re: GPO and Registry Preferences HELP! i got it to work.. i applied it to Domain again. I can't apply it to computers because my computer container is a CN not an OU. thanks

October 31st, 2006	Top \| #4
Mooz Moozically Con~foozed Joined: July 2002 Location: UK Posts: 126 Reputation: 60 Power: 122	Re: GPO and Registry Preferences HELP! DESKTOP STANDARD HAS NOW BEEN BOUGHT BY MICROSOFT. please do not buy it unless you are ready for it to be discontinued pre longhorn (i almost fell into this trap_ ) ... i now use desktop authority (script logic) which works over well and does all that DS did and more to boot. D

October 31st, 2006	Top \| #5
fitz *XPista7eopardix Joined: April 2004 Location: Chicagoland Posts: 4,028 Reputation: 2947 Power: 168**	Re: GPO and Registry Preferences HELP! The registry extention is a free product from them. Nothing to buy. Hee-hee! Evil makes my buttocks tingle.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
System Preferences: Processor	Geffy	Macintosh	2	August 31st, 2007 4:54pm
Registry in use during log off	Admiral Michael	Windows Desktop Systems	4	January 19th, 2006 1:54am
How to set Google preferences and still disable Google's cookie	tdinc	Windows Desktop Systems	4	August 30th, 2004 4:01am
Registry HELP!	Diligent1	Windows Desktop Systems	1	November 26th, 2002 4:53pm
Registry ??	westy1	Windows Desktop Systems	2	February 13th, 2002 4:45am

Latest News Posts

Latest Forum Posts

Latest Member Blogs