4.2 Policy Administration Update Message

The following is an example user registry settings message that an administrator wants to set on the client, Database Key Software\Microsoft\Windows\CurrentVersion\Policies\System with the Name Value Pair "HideLogonScripts", 1 with the Data Type REG_DWORD for the user account's Database Scope. The descriptions of when Computer Policy Mode is used versus when User Policy Mode is used are described in 1.3.2.

  1. Perform a remote File Open for the file <gpo path>\User\Registry.pol. The remote File Open requests Exclusive Write permission and requests that if the file does not exist it be created. If the Open request returns a failure status, the update process is terminated.

  2. A series of remote file read requests and replies to read the registry settings. The entire file is read by the administrative plug-in tool.

  3. In case this value that the administrator is trying to configure exists, the existing values are displayed in the administrative plug-in tool; otherwise, the settings that the administrator is trying to configure are displayed as not configured in the administrative plug-in tool.

  4. The administrative plug-in then performs a series of remote file writes to overwrite the contents of the opened file with new settings, as shown in the following figure. These writes continue until the entire file is copied or an error is encountered. If an error is encountered, the protocol sequence is terminated.

  5. The administrative plug-in then issues a file close to close the file.

Contents of <gpo path>\User\Registry.pol

Figure 3: Contents of <gpo path>\User\Registry.pol