How significant of a role do registry edits play in a corporate IT environment?

Status
Not open for further replies.
K

KatzWo

Member
Hopefully this is the right subforum *General* to ask this question. I am just curious. I know that GPO (not the same thing I'm aware) is massive and very important to lock down employee PC's but what about the registry editor?
 
This question is more for Quora, StackOverflow or superuser. In the future, redirect your general IT questions there.

GPO's are not guaranteed to be "massive", it depends on the organization's need for granular controls. Enforcing a single, universal policy is trivial.
But some orgs need specific sub-rules for individual departments, server roles, or even employees -- which grows the complexity.

Take the time to read a good Active Directory book from the library.

Group Policy is really a set of registry changes, which are stored in policy files. Policy files may be implemented, or audited. Within AD, GPO's are pushed to target systems and installed locally. Local policy files can be copied or imported into images.

Policy files work by creating or changing reg keys. But you can get the same results from directly editing the registry. It's just a top-level system to push changes around multiple PC's. There's no magic, it's just a distributed management tool.
 
garlin said:
This question is more for Quora, StackOverflow or superuser. In the future, redirect your general IT questions there.

GPO's are not guaranteed to be "massive", it depends on the organization's need for granular controls. Enforcing a single, universal policy is trivial.
But some orgs need specific sub-rules for individual departments, server roles, or even employees -- which grows the complexity.

Take the time to read a good Active Directory book from the library.

Group Policy is really a set of registry changes, which are stored in policy files. Policy files may be implemented, or audited. Within AD, GPO's are pushed to target systems and installed locally. Local policy files can be copied or imported into images.

Policy files work by creating or changing reg keys. But you can get the same results from directly editing the registry. It's just a top-level system to push changes around multiple PC's. There's no magic, it's just a distributed management tool.
Click to expand...
So if 'General' isn't for such questions, then what is it for?
 
General Windows, PC questions, comments and news. Not "someone teach me basic IT skills on NTLite forum".
I will allow this thread, but future OT topics will be cleaned.
 
Status
Not open for further replies.
Back
Top