Push new registry keys via group policy

Question

Recently I have added registry keys in active directory and I need to push them via group policy instead of going to each PC to apply the new ones.
How can I push new registry keys (not modify existing ones) via group policy?

Note: I'm using Windows Server 2003 64 bit and my clients are running Windows XP Professional.

Solution 1

I solved but I didn't understand how it works!.I have windows 7 pro and I have installed administrative tools of 2008 in group policy management I created new policy so inside group policy management of windows 2008 there are new features for registry Computer Configuration --> Preferences --> Windows setting --> Registry from there you can push new policies but don't ask how I can use this feature and my windows server is 2003! if any one can explain to me?

Solution 2

There is no built-in feature in Windows Server 2003 GPOs to configure custom Registry keys.

You can either use a startup/logon script to import a .REG file, or create a custom administrative template which will act on the keys you need to modify.

Solution 3

Add this to your netlogon folder then create a logon gpo to run the batch. Change the registry key and location and name of file to whatever you call them.

REG QUERY hkcu\software\microsoft\windows\currentversion\run /v restart_sticky_notes
IF %errorlevel%==0 GOTO skip_reg_inport
regedit.exe /s \\server\registry_folder\regfile.reg
:skip_reg_inport

Comments

[AAA-Super]

But the way i didn't understand what you said about regsomething.exe?

[AAA-Super]

Massimo could you please read down what I faced the problem! and how can I create a custom administrative template?Thanks

[AAA-Super]

Well it seems i have another problem why i didn't see netlogon? in this case what is have to do? thanks for your help

[Nixphoe]

The netlogon folder is on any of your domain controllers default share. If you're missing that, that's a whole other issue and would be best addressed in another question. You basicly want to drop your script and your .reg file into a shared folder so all of your workstations can access it. Then make sure to point to those locations in your GPO logon script, and the regedit import.

[AAA-Super]

So I have to write another question to explain where netlogon share folder disappeared.Thanks alot for your support and i will come back later

[Nic]

You're using something called Group Policy Preferences (GPP) which is an extension to regular Group Policy. Your target computers will only receive the settings if they have the GPP update installed. microsoft.com/download/en/details.aspx?id=24449