Datacrash.net - Implement registry tweaks with registry editors disabled by gpo

Implement registry tweaks with registry editors disabled by gpo

Written by Hans Straat, Friday, 28 April 2006

In most terminal server / citrix environments registry editing tools are disabled by group policy objects (GPO).

This however sets the challenge for an administrator to implement registry key's for programs. A way to achieve this is using VBscript. VB knowns the registry commands for reading , writing and deleting keys in the registry.

You have to set variables so the script knows what to do offcourse. As I was challanged to enable registry tweaks in my environment I also stumbled with this simply because I ain't a genious in writing scripts. So to you scripting gurus my scripts look nasty and dirty but they work

The script to remove the yahoo icon from the file menu in Adobe Acrobat Reader 7.0

Use this as an example you can rewrite it to use it for your own registry tweaks.

To disable objects in Adobe Acrobat Reader you can of course also create a mst file

------------------------------------------------------------------------------------------------------------------------------------

'code starts here

'This script writes registry keys to tweak Adobe Acrobat Reader with registry editing tools disabled by GPO policies

' Define all used variables
Option Explicit
Dim Sh
DIM key

Set Sh = CreateObject("WScript.Shell")

' write the registrykey's to the hyve HKey_Current_User

key = "HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\7.0\"
Sh.RegWrite key & "AVGeneral\ctoolbars\cWebSearchView\cPositions\cInternals\", "default"
Sh.RegWrite key & "AVGeneral\ctoolbars\cWebSearchView\cPositions\cInternals\bHidden", 0000001, "REG_DWORD"
'code ends here

------------------------------------------------------------------------------------------------------------------------------------

As you can see it's pretty simle, there are variables set and you call regwrite to write they key's you desire. What I always do it also set the default key empty in the registry. Then I write the actual key.

You can change the hive as you please but keep in mind that you test it before using it in a production environment. The registry is a powerful place and you can easily messup a entire server with just a few clicks.

More to come: howto Implement bulk registry key's with vbscript by reading a predifined txt file

Comments

Add New

RSS