Change in Registry settings does not reflect for the corresponding settings in GUI in windows 2003 server

command-line-interfacewindows-registry

I have updated registry value for Software Restriction Policies/Security Levels. However, changes were not reflecting in the GUI. I have restarted the server still no effect.

below command is used to update registry value.
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\safer\codeidentifiers /v DefaultLevel /t Reg_DWORD /d 262144 /f

also executed gpupdate command.

command execution is successful. Even values were changed in registry but Software Restriction Policies/Security Levels is still set as Disallowed. It should be unrestricted after the command is executed.

Any suggestion would be greatly appreciated…

Regards,
Monoj

Best Answer

I've tried this some time ago, and it seems that in this specific GP settings changes in the registry doesn't reflect in the console.
I guess that's because there is also a file (C:\Windows\security\database\SecEdit.sdb) that holds the settings of the "Local Security Settings", and the mmc is using it instead of the registry.

The manual values you put in the registry should work as usual, but I'd strongly suggest you use only the regular mmc.

Related Solutions

Windows Registry – Does DisablePagingExecutive Have Any Effect?

There is an enormous amount of confusion on the internet regarding this function. The setting only affects the portion of the kernel known as the executive, and then only to the portions that are pageable. There are other parts of the kernel that are completely unaffected by this setting.

Kernel paging works the same way as any other paging. Code and data that is frequently accessed will be kept in RAM while the remainder will remain on disk - where it belongs. The system will not remove any portion of the kernel from RAM unless it has found a better use for it. Microsoft has devoted an enormous amount of research and testing to the paging systems.

In the context of the kernel, "Nonpaged" means code and data that can never be paged out under any circumstances. "Paged" means code and data that CAN be paged out if necessary. How much actually IS paged out is impossible to tell from Task Manager. A portion of the code that is paged out was never read from disk in the first place because it wasn't needed yet. Not all of the kernel is frequently accessed. You should not expect Paged and Nonpaged numbers to be affected by the setting in question.

Note: When code is paged out it is not normally copied to the pagefile. This is not necessary as it can simply be reloaded from the original files. This applies to most code, not just the kerenl.

With a reasonable amount of RAM the setting will do essentially nothing. It simply prevents the system from paging out data that it didn't want to page out anyway.

Windows – Does Windows Have a Built-in ZIP Command for Command Line?

It's not built into Windows, but it's in the Resource Kit Tools as COMPRESS,

C:\>compress /?

Syntax:

COMPRESS [-R] [-D] [-S] [ -Z | -ZX ] Source Destination
COMPRESS -R [-D] [-S] [ -Z | -ZX ] Source [Destination]

Description:
Compresses one or more files.

Parameter List:
-R Rename compressed files.

-D Update compressed files only if out of date.

-S Suppress copyright information.

-ZX LZX compression. This is default compression.

-Z MS-ZIP compression.

Source Source file specification. Wildcards may be
used.

Destination Destination file | path specification.
Destination may be a directory. If Source is
multiple files and -r is not specified,
Destination must be a directory.

Examples:

COMPRESS temp.txt compressed.txt
COMPRESS -R *.*
COMPRESS -R *.exe *.dll compressed_dir

Best Answer

Related Solutions

Windows Registry – Does DisablePagingExecutive Have Any Effect?

Windows – Does Windows Have a Built-in ZIP Command for Command Line?

Related Topic