BGInfo not being applied for users with registry editing restriction

Andy Harris 6 Reputation points
2022-05-05T14:56:39.097+00:00

I have set up BGInfo to be applied to users via a logon script in a GPO. The batch file being executed is shown below:
reg add HKEY_CURRENT_USER\Software\Sysinternals\BGInfo /v EulaAccepted /t REG_DWORD /d 1 /f
%logonserver%\NETLOGON\Bginfo\Bginfo64.exe %logonserver%\NETLOGON\Bginfo\bg_config.bgi /silent /TIMER:00 /nolicprompt

This works correctly for all users, except for students who have the following set via GPO:
Prevent access to registry editing tools Enabled
Disable regedit from running silently? No

I'm assuming this registry restriction is blocking the addition of the registry key in the batch file.

Can anyone offer any suggestions about how to resolve this issue?

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,123 questions
0 comments No comments
{count} vote

1 answer

Sort by: Most helpful
  1. Philippe Levesque 5,706 Reputation points
    2022-05-05T15:18:31.56+00:00

    Use another GPO that target your student, but with Group Policy Preference and set the registry settings by there.

    The fact you launch reg.exe to make the change is what block you there.

    Some example for GPP;

    199321-image.png

    That way your setting for the registry editor will still hold.

    0 comments No comments