Software restriction policies set in the registry don't update Local Group Policy

Posted by Jon Rhoades on Server Fault See other posts from Server Fault or by Jon Rhoades
Published on 2010-03-14T22:21:41Z Indexed on 2010/03/14 22:25 UTC
Read the original article Hit count: 625

Filed under:

XP

|

group-policy

|

samba

|

domain

|

registry

The joys of a Samba domain... First off Domain Group policy can't be used until Samba 4 arrives.

We need to setup Software Restriction Policies (SRPs) on most of the computers in our Samba domain and I would dearly like to automate this. (We are moving away from just disabling the Windows installer). The traditional way is to set SRPs using Local Group Policy (LGP) Computer Conf->Windows Settings->SRP but this involves visiting every machine as it can't be set using in NTConfig.pol.

It is possible to attempt to create the SRPs directly in the registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\262144\Paths\{30628f61-eb47-4d87-823b-6683a09eda87}]
"LastModified"=hex(b):40,a2,94,09,b5,5d,ca,01
"Description"=""
"SaferFlags"=dword:00000000
"ItemData"="C:\\location\\subfolder"

SaferFlags DWORD seems to be what turns it on or off, but although this seems to work it does not update the Local Group Policy - SRPs still show as "No SRPs Defined".

Where does the LGP store this setting - is it even in the registry and more importantly - Is there a cleverer way of setting up SRPs?

© Server Fault or respective owner

Related posts about XP

dual boot xp/xp, now win7/xp getting no xp

as seen on Super User - Search for 'Super User'
I have a laptop on which I have two drives with separate XP installs, one barebones for music production, the other "normal" XP with Office etc. (Unfortunately the bios won't give a boot disk choice) Normally I would be presented with two WinXPs on booting. Selecting the second one would get me into… >>> More
How To Run XP Mode in VirtualBox on Windows 7 (sort of)

as seen on How to geek - Search for 'How to geek'
A few weeks ago we showed you how to run XP Mode on a Windows 7 computer without Hardware Virtualization using VMware. Some of you have been asking if it can be done in Virtual Box as well. The answer is “Yes!” and here we’ll show you how. Editor Update: Apparently there isn’t a way to activate XP… >>> More
How To Run XP Mode in VirtualBox on Windows 7 (sort of)

as seen on How to geek - Search for 'How to geek'
A few weeks ago we showed you how to run XP Mode on a Windows 7 computer without Hardware Virtualization using VMware. Some of you have been asking if it can be done in Virtual Box as well. The answer is “Yes!” and here we’ll show you how. Editor Update: Apparently there isn’t a way to activate XP… >>> More
Install XP Mode with VirtualBox Using the VMLite Plugin

as seen on How to geek - Search for 'How to geek'
Would you like to run XP Mode, but prefer Sun’s VirtualBox for virtualization? Thanks to the free VMLite plugin, you can quickly and easily run XP Mode in or alongside VirtualBox. Yesterday we showed you one method to install XP Mode in VirtualBox, unfortunately in that situation you lose XP’s… >>> More
Windows XP - Security Update for Windows XP (KB923561) (KB946648) (KB956572) (KB958644)

as seen on Super User - Search for 'Super User'
My father's computer has Windows XP, but when I try to install the service packs it always fails. What gives? Here are the errors that I get in the event log: Date: 2/6/2010 Time: 12:02:18 AM Type: Error User: N/A Computer: EVO Source: Windows Update Agent Category: Installation Event ID: 20 Installation… >>> More

Related posts about group-policy

Network Logon Issues with Group Policy and Network

as seen on Super User - Search for 'Super User'
I am gravely in need of your help and assistance. We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ buildings around campus. Almost every computer on campus has the problem that I will be describing.… >>> More
Windows Update when Group Policy Forbids

as seen on Super User - Search for 'Super User'
I am in the administrators group for my local Windows XP machine and I would like to get updates via http://update.microsoft.com/[1]. However, this is prevented via the group policy: Network policy settings prevent you from using this website to get updates for your computer. Is there anyway… >>> More
Active Directory Group Policy: Script Errors

as seen on Server Fault - Search for 'Server Fault'
Hello all. Anyone having issues with AD group policy script errors when enabling VMware Fusion's "Sharing" feature? I've run into this problem in version 2.0 and 3.0. I have a logon script applied on an AD OU. It works fine on all Windows client workstations and in VMware Fusion only when the "Sharing"… >>> More
Workstation file synchronization to deploy though a group policy

as seen on Server Fault - Search for 'Server Fault'
I have roughly 20 PC i want to back up myDocuments folder to one of our servers. Need some recommendations on a file sync program that i can deploy though a group policy. And Looking for a work around to keep from configuring each pc to back up to a specific file on the server >>> More
Software restriction policies set in the registry don't update Local Group Policy

as seen on Server Fault - Search for 'Server Fault'
The joys of a Samba domain... First off Domain Group policy can't be used until Samba 4 arrives. We need to setup Software Restriction Policies (SRPs) on most of the computers in our Samba domain and I would dearly like to automate this. (We are moving away from just disabling the Windows installer)… >>> More