I'm trying to import the following registry file through GP via a logon
script to disable CD burning in Windows XP:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\
Explorer]
"NoCDBurning"=dword:00000001

The problem is that I get the following error message (or close to it):

"Cannot import (filename). Not all data was successfully written to the
registry. Some keys are open by the system or other processes."

The problem really isn't GP related, because if I just double-click the
registry file as a restricted user, I get the same error message. It only
allows me to import the file if I'm logged on as an administrator.

I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
sure why I'm running into an issue with this one.

Thanks.

That is because users do not have write permissions to policies key and you
do not want them to. Instead try using
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer]
as a Group Policy "startup" script and it should disable cd burning for all
users on the computer. If you want it to apply to specific domain users
users then create and deploy a custom .adm template as described in the
article at the first link below and use Group Policy to apply it to the
users you want to restrict. --- Steve

http://thelazyadmin.net/index.php?/a...Templates.html
http://www.windowsecurity.com/articl...-Registry.html
--- options for pushing out registry settings.


"Marks70" <Marks70@discussions.microsoft.com> wrote in message
news:E4C4A1E9-44B5-4486-A76D-876B3F4526C5@microsoft.com...
> I'm trying to import the following registry file through GP via a logon
> script to disable CD burning in Windows XP:
>
> Windows Registry Editor Version 5.00
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\
> Explorer]
> "NoCDBurning"=dword:00000001
>
> The problem is that I get the following error message (or close to it):
>
> "Cannot import (filename). Not all data was successfully written to the
> registry. Some keys are open by the system or other processes."
>
> The problem really isn't GP related, because if I just double-click the
> registry file as a restricted user, I get the same error message. It only
> allows me to import the file if I'm logged on as an administrator.
>
> I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
> sure why I'm running into an issue with this one.
>
> Thanks.

Thanks for the explanation Steven. I guess I'm confused then why another
HKEY_CURRENT_USER registry item that had a change for Internet Explorer was
able to be imported through a logon script. Can some HKCU registry items be
imported through a logon script, and if not, I don't understand why the IE
registry change worked.

"Steven L Umbach" wrote:

> That is because users do not have write permissions to policies key and you
> do not want them to. Instead try using
> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer]
> as a Group Policy "startup" script and it should disable cd burning for all
> users on the computer. If you want it to apply to specific domain users
> users then create and deploy a custom .adm template as described in the
> article at the first link below and use Group Policy to apply it to the
> users you want to restrict. --- Steve
>
> http://thelazyadmin.net/index.php?/a...Templates.html
> http://www.windowsecurity.com/articl...-Registry.html
> --- options for pushing out registry settings.
>
>
> "Marks70" <Marks70@discussions.microsoft.com> wrote in message
> news:E4C4A1E9-44B5-4486-A76D-876B3F4526C5@microsoft.com...
> > I'm trying to import the following registry file through GP via a logon
> > script to disable CD burning in Windows XP:
> >
> > Windows Registry Editor Version 5.00
> >
> > [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\
> > Explorer]
> > "NoCDBurning"=dword:00000001
> >
> > The problem is that I get the following error message (or close to it):
> >
> > "Cannot import (filename). Not all data was successfully written to the
> > registry. Some keys are open by the system or other processes."
> >
> > The problem really isn't GP related, because if I just double-click the
> > registry file as a restricted user, I get the same error message. It only
> > allows me to import the file if I'm logged on as an administrator.
> >
> > I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm not
> > sure why I'm running into an issue with this one.
> >
> > Thanks.
>
>
>

It depends on the permissions the user has to the registry key which can be
viewed with regedit. Often the user will have full control but in general
not for policies though administrators would have full control. --- Steve



"Marks70" <Marks70@discussions.microsoft.com> wrote in message
news:622AE5A4-6BE7-4A1E-BFF0-A4B0852E7D3E@microsoft.com...
> Thanks for the explanation Steven. I guess I'm confused then why another
> HKEY_CURRENT_USER registry item that had a change for Internet Explorer
> was
> able to be imported through a logon script. Can some HKCU registry items
> be
> imported through a logon script, and if not, I don't understand why the IE
> registry change worked.
>
> "Steven L Umbach" wrote:
>
>> That is because users do not have write permissions to policies key and
>> you
>> do not want them to. Instead try using
>> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer]
>> as a Group Policy "startup" script and it should disable cd burning for
>> all
>> users on the computer. If you want it to apply to specific domain users
>> users then create and deploy a custom .adm template as described in the
>> article at the first link below and use Group Policy to apply it to the
>> users you want to restrict. --- Steve
>>
>> http://thelazyadmin.net/index.php?/a...Templates.html
>> http://www.windowsecurity.com/articl...-Registry.html
>> --- options for pushing out registry settings.
>>
>>
>> "Marks70" <Marks70@discussions.microsoft.com> wrote in message
>> news:E4C4A1E9-44B5-4486-A76D-876B3F4526C5@microsoft.com...
>> > I'm trying to import the following registry file through GP via a logon
>> > script to disable CD burning in Windows XP:
>> >
>> > Windows Registry Editor Version 5.00
>> >
>> > [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\
>> > Explorer]
>> > "NoCDBurning"=dword:00000001
>> >
>> > The problem is that I get the following error message (or close to it):
>> >
>> > "Cannot import (filename). Not all data was successfully written to the
>> > registry. Some keys are open by the system or other processes."
>> >
>> > The problem really isn't GP related, because if I just double-click the
>> > registry file as a restricted user, I get the same error message. It
>> > only
>> > allows me to import the file if I'm logged on as an administrator.
>> >
>> > I've imported an HKEY_CURRENT_USER registry entry in the past, so I'm
>> > not
>> > sure why I'm running into an issue with this one.
>> >
>> > Thanks.
>>
>>
>>