GPO Startup Script can't modify HKU Registry?

Posted by pepoluan on Server Fault See other posts from Server Fault or by pepoluan
Published on 2012-12-14T16:48:05Z Indexed on 2012/12/14 17:05 UTC
Read the original article Hit count: 241

I've been scratching my head with my current problem.

You see, I have this Startup Script that I pushed via GPO.

Problem is, although the script starts alright (I see the event it created when starting in the event log), it always fails when trying to enumerate and/or modify registry settings under HKU.

  1. If I login as administrator and execute the script manually, it works!
  2. If I startup a Command Prompt as SYSTEM (using the "at" workaround) and execute the script manually, it also works!
  3. If I reboot... the script always fails.

Can anyone shed a light on my problem?

Additional information: This script injects some registry values for the Local Administrator (i.e., S-1-5-21-etc etc etc-500), so I'm not sure that it's doable via GPP, not to mention that since nearly all the workstations in my domain are still using XP, so no guarantee of GPP support.

© Server Fault or respective owner

Related posts about active-directory

Related posts about group-policy