none
Remote registry for an excusive AD Group RRS feed

  • Question

  • Hi,

    Is it possible to activate remote registry on all machines but only a specific AD Group to use it?

    Friday, October 22, 2021 7:20 AM

All replies

  • What exactly do you mean by "specific AD Group"?
    • Proposed as answer by VASBHI Thursday, February 3, 2022 7:12 AM
    • Unproposed as answer by VASBHI Thursday, February 3, 2022 7:12 AM
    • Proposed as answer by 90S Outfits Wednesday, June 1, 2022 1:38 AM
    Thursday, October 28, 2021 3:58 PM
  • Thanks for posting your query to the forum. I did review your requirement and it seems you wanted to enable the remote registry services on multiple client workstations(Domain joined) and also need to restrict the settings to a specific AD group.

    So as this is a two step requirement, (Enabling the remote registry and to specific AD group), here are the two parts solution:

    a-We can achieve the activating remote registry using the group policy using the below mentioned settings:

    1. Open the Group Policy editor.
    2. Navigate to, Local Computer Policy > Computer Configuration > Policies > Windows Settings > Security Settings > System Services.
    3. In the right hand pane locate Remote Registry.
    4. Define the policy, and set the Startup type to Automatic.

    b-We can make use of Security filtering and only add those computer accounts and the specific group/user to which we wanted to apply the above settings.

    For more information, refer to the steps mentioned in the below link.

    https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/assign-security-group-filters-to-the-gpo

    Hope the above information helps to fulfill your requirement.


    Wednesday, February 2, 2022 10:34 AM
  • How do I enable remote registry in Group Policy?

    Monday, May 2, 2022 6:37 AM
  • How do I enable remote registry in group policy?
    Saturday, May 14, 2022 10:05 AM
  • How do I enable remote registry in group policy?
    Sunday, May 15, 2022 6:45 PM
  • I can't access the Group Policy Editor. Do you have a solution ?
    • Proposed as answer by Fradulentus Tuesday, May 17, 2022 2:34 AM
    Monday, May 16, 2022 3:02 PM
  • Is it necessary to access the group policy ? 
    Friday, May 20, 2022 12:12 PM
  • Привет (-:
    Monday, June 6, 2022 9:30 PM
  • I assume you're using Windows 11 on your computer. If you are, the way to access the Group Policy Editor is simple. If you go into the search menu, there should be some type of search bar in the opened window. Type "edit group policy" into that space and there should be an option that lets you open it. Click on it and the policy editor should open. Now you should be free to make any changes you please. There are a few other ways to access the policy editor, but I find this way to be the quickest. I hope you find this useful, Laurie_Makston. 
    Monday, June 6, 2022 10:27 PM
  • Laurie_Makston, you can open Group Policy Editor on Windows 11 by using File Explorer. You can find it at the bottom of your screen—where the taskbar is. Open it. Once it's running, put "gpedit.msc" into the search bar above all the icons. Press Enter and Group Policy Editor will open for you. This is a quick, easy, and efficient way to get to GPE. If you want another way to open File Explorer that's even faster than searching for its icon, hold down "Windows" and "E" on your keyboard. 
    • Edited by Ryan M. 12 Monday, June 6, 2022 11:04 PM
    Monday, June 6, 2022 11:03 PM
  • If you wanted to apply group policy to a set of computers in the domain, you should have domain admin/delegated access to group policy is needed.

    If you are planning to apply policy only to one or two systems, you can login to those systems using local admin account and in the run type gpedit.msc. In this way you can access group policy.

    Saturday, June 25, 2022 5:12 PM
  • If you wanted to enable remote registry for a very few systems, you doesn't need any group policy. In the respective system, open services.msc, set the remote registry to automatic.
    Saturday, June 25, 2022 5:15 PM