Windows 11

garlin & crypticus
before posting/replying here, earlier I tried to create that by creating a . REG file (attached here), but that didn't do anything
 

Attachments

I had issues with group policies being applied by reg files, reported them to nuhi. Gonna see what happens here, wonder if its connected.
 
Windows Registry Editor Version 5.00

[HKCU\SOFTWARE\Policies\Microsoft\OneDrive]
"EnableHoldTheFile"="dword:00000001"

[HKCU\SOFTWARE\Microsoft\OneDrive]
"EnableHoldTheFile"="dword:00000001"

you also don't need "x" on dword part
 
HKCU? ive only ever used HKEY_CURRENT_USER in a reg/bat/cmd file.
reg & regedit allow abbreviations, PowerShell doesn't. Using the full path is preferred if you don't know what app will read your reg file.

[HKCU\SOFTWARE\Policies\Microsoft\OneDrive]
"EnableHoldTheFile"="dword:00000001"
Oops, my bad. Copied it from the OneDrive page w/o checking. The entire doc repeats the same error of surrounding dword with " ".
 
I had issues with group policies being applied by reg files, reported them to nuhi. Gonna see what happens here, wonder if its connected.
It should be vice versa - as i understand GPO settings override registry keys - but good point as i same time understand all the Settings clicks in NTL change regkeys and not GPO settings even some may be same when you're making an Image add reggies.
 
francis11 as always a problem is 50% likely to be pebkac so i asked nuhi and he said he hadnt heard of anything. I would need to redo that 8.1 install(170 updates) from scratch to see what happened.
 
It should be vice versa - as i understand GPO settings override registry keys - but good point as i same time understand all the Settings clicks in NTL change regkeys and not GPO settings even some may be same when you're making an Image add reggies.
I always wonder about the real difference between these two & since the discussion is going for these, let me ask the question right now

if GP & Regedit for any particular function does the same job/thing, then what's the difference between these two?
& which one should be used for any practical & more legitimate reason?
 
GPO settings is limited from registry settings as you have a lot more regs can accomplish what your want. Ie i have a certain way i want my joblist to be present as attached which i dont find in GPO settings.
 

Attachments

Last edited:
Group policy files are just specialized containers for reg keys. If you dump them using LGPO, the parsed output looks like a reg file. Whatever is contained in the policy is forced applied during boot, or by gpupdate.

It's possible to change reg values in normal registry and be in conflict with the policy file. The policy file wins when it gets applied.
The general rule is don't overlap whatever you're editing. NTLite can't help because it's blind to GPO files.

When a GPO is applied, it imports what keys it regulates under the Policy subtree. This is what values will be mirrored to CurrentVersion.

EDIT
Machine policy is enforced on startup, User policy on first logon. There's a scheduled refresh every 90 min. which is randomly adjusted +/- 30 min.
The random timing is to help Active Directory clients, so everyone doesn't query the domain controller at the same time. It's the same logic as not every machine running WU at the exact same time.
 
Last edited:
GPO settings is limited from registry settings as you have a lot more regs can accomplish what your want. Ie i have a certain way i want my joblist to be present as attached which i dont find in GPO settings.
Export your current user policy with LGPO, as parsed text. Append this to the output, and import back to user policy.
Yes, the entire hex array must be a single line :confused:

https://gms.inpadi.dk/wiki?p=yaa. LGPO - Local Group Policy Object Utility.html

LGPO.exe /parse /u C:\Windows\system32\GroupPolicy\User\Registry.pol > userpolicy.txt
[ Append your additions to userpolicy.txt ]

LGPO.exe /r userpolicy.txt /w C:\Windows\system32\GroupPolicy\User\Registry.pol
 

Attachments

so, what's the final outcome in layman's language?
GPO & Reg edit hold the same power & do the same thing
Or GPO is greater than Reg edit? Or the opposite?

I ain't talking about the GUI part, everyone knows that GPO has a GUI
Judging from the functionality part
 
GPO & reg edit do the same thing.
GPO is enforceable, they revert your reg edit.
Everyone can reg edit. Non-experts think GPO's are too much hassle.

If you don't need enforcement, take the reg edit a GPO creates and use it directly, bypassing the GPO.
 
GPO & reg edit do the same thing.
GPO is enforceable, they revert your reg edit.
Everyone can reg edit. Non-experts think GPO's are too much hassle.

If you don't need enforcement, take the reg edit a GPO creates and use it directly, bypassing the GPO.
Sir if somebody wants to tweak "Network List Manager Policies" can it be done via reg too :)
 
Back
Top