Group Policy Registry Settings

Description

This Component allows you to define individual registry settings defined for a Group Policy.

These registry settings are only applied to Group Policy Objects defined in the ADMF - they will not be applied to GPOs outside of this solution!

Example Configurations

Extend the group policy “SEC-T0-UserBaseline” by having it set ScreenSaveTimeOut to 300 seconds:

{
    "PolicyName":  "SEC-T0-UserBaseline",
    "Key":  "HKCU\\Software\\Policies\\Microsoft\\Windows\\Control Panel\\Desktop",
    "ValueName":  "ScreenSaveTimeOut",
    "Value":  300,
    "Type":  "DWord"
}

Extends the group policy “C-S-CA-EnrollmentPolicy” by using the Domain Data Component to retrieve some data and injecting it into the policy under the specified key as the default value:

{
    "PolicyName":  "C-S-CA-EnrollmentPolicy",
    "Key":  "HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Cryptography\\PolicyServers",
    "ValueName":  "(Default)",
    "Type":  "String",
    "DomainData":  "PolicyID"
}

Properties

PolicyName

This parameter uses name resolution.

Name of the group policy object to attach this setting to.

Key

This parameter uses name resolution.

The registry key affected.

ValueName

This parameter uses name resolution.

The name of the value to modify.

Value

ParameterSet: Value

The value to insert into the specified registry-key-value.

DomainData

ParameterSet: DomainData

Instead of offering an explicit value, have the resulting value calculated by a scriptblock executed against the target domain. In opposite to ADMF Contexts, DomainData data gathering scriptblocks are executed on a per-domain basis. While a Context supports integrating logic, Contexts themselves are not re-run when switching to another domain with the same Context choice.

DomainData gathering logic can be configured using the Domain Data Component.

Type

What kind of registry value should be defined? Supported types:

• Binary
• DWord
• ExpandString
• MultiString
• QWord
• String