Group policy Windows NT / 2000

[Deleted User]

Hi,

Am I going mad or did I once read Windows NT stamps group policies into the registry whereas 2000 onwards changes the reg value temporarily until the user logs out?

Can anyone find an article on this?

David

Red_Rose_Exile

You can have both in Win2k onwards, have a read of this article

[Deleted User]

Red_Rose_Exile wrote: »

You can have both in Win2k onwards, have a read of this article

You're correct. Thank you.

From here

Group Policy templates provide an interface that you can use to apply registry changes to the target computer. Unlike policy settings that you create in Microsoft Windows NT 4.0, if you use Group Policy to apply registry changes, you can make these registry changes non-persistent. This means that when you log off the computer or when you shut down the computer, the policy settings are removed. To create non-persistent policy settings, you must create the registry changes on the target computer in one of the following registry locations:

• For computer policy settings:HKEY_LOCAL_MACHINE\SOFTWARE\Policies
  -or-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
• For user policy settings:HKEY_CURRENT_USER\SOFTWARE\Policies-or-
  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies

NOTE: If Group Policy changes the target computer's registry in a location other than one of these locations, these changes are persistent. These changes are not removed when you log off the computer or when you shut down the computer. This behavior is also known as "tattooing" the registry.

Finally see this excellent article