Each GPO has a version number and every time you edit a GPO this version number gets increased, then when a PC applies the GPO it remembers what the version number was when it applied it. Now when you run gpupdate (without /force) it just applies GPOs that have a newer version than last time they were applied. Secondly, just to clear something up that a lot of people seem to get wrong (though it doesn't really matter that much) - if you have just created a new GPO then you do not need to use /force with gpupdate. He is asking how he can grant users permission to access all registry keys. The OP is not asking how to prevent the user from being able to launch Registry Editor. *in client PCs use gpupdate /force command to apply those changes immediately.įirstly, I think you have misunderstood the question. If you clicked Enabled, click Yes or No in the Disable regedit from running silently? box to specify if Registry Editor can be started in silent mode (regedit /s). Click to select one of the following options:ġ0. Expand User Configuration, Administrative Templates, and System, and then click Prevent access to registry editing tools.ĩ. Right-clicking the new GPO and choosing Edit will launch the GPO Editor.Ĩ. Enter the name of the GPO you want to create (Registry Edit.) and click OK.
Right-click Group Policy Objects and choose New.ħ.
Expand the Domain Object that holds the GPO you are interested in.Ħ. Click Start, Run, type gpmc.msc, and then press Enter.Ĥ.
0 kommentar(er)
