You want to change the permissions on a Windows Registry key for all of your Active Directory (AD) computers.
Created a GPO that sets the permissions!
- Log into your Domain Controller (DC) with Admin privileges
- Click “Start”
- Select “Administrative Tools”
- Select “Group Policy Management”
- Expand your Forest and Expand Domains OU
- Right Click on the DC
- Select “Create a GPO in this Domain and Link it here”
- Name your new GPO respectively and Click “OK”
- Right Click on your new GPO and select “Edit”
- Expand “Computer Configuration”, “Windows Settings” and select “Registry”
- Right click anywhere in the blank area on the right and select “Add Key…”.
- Select the Registry Key that you want to set permissions on and click OK
- Select the user group or user you want to set permissions for
- Select the permissions you want them to have and Click OK
- On the Add Object dialog box leave the default selections and click “OK”
- You have now created a GPO that sets permissions to a Registry Key