group policy problem...

wijcc · 8 Feb 2017 at 16:30

Hi,

I am trying to roll out a group policy to disable the email address autocomplete in ms outlook. I created a group policy to run a logon script which disables this feature. The problem i have is that it only seems to work for some users.

regedit.exe /s "autocomplete.reg"

Here is the contents of autocomplete.reg

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\Outlook]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\Outlook\Contact]
"CreateContactsForOneOffs"=dword:00000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\Outlook\Preferences]
"ShowAutoSug"=dword:00000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\Outlook\Preferences]
"ShowAutoSug"=dword:00000000

Anyone know where i am going wrong, could it be that some users don't have permissions to change the registry values??

Thanks in advance

LizardKing · 8 Feb 2017 at 16:48

Are you running the same version of Office across the board?

wijcc · 8 Feb 2017 at 18:04

Yes running the same version of office throughout the company

wijcc · 8 Feb 2017 at 18:07

It seems to apply to my profile whichever workstation I log onto, but not to none admin level users strangely??

Django x2 · 8 Feb 2017 at 18:51

There's a much better way to do this. Strip the attributes out from all users in AD. It's the mail attribute that autodiscovers so just export all your users to CSV and re-import them with mail set to "" (as in, clear).

Although to address your issue, as a normal user, make sure you can access the %sysvol% folder where the logon script is located and try and run it. If it fails, it's permissions.

wijcc · 8 Feb 2017 at 19:04

Can normal users run .reg files?
What would be the simplest way to achieve this?

Django x2 · 8 Feb 2017 at 19:18

What's the OS? If it's windows 7 or later, get the logon script to call PowerShell with the first line being set-executionpolicy bypass -force. Then, using similar commands set or remove the reg keys and at the end set the executionpolicy back with something like set-executitonpolicy remotesigned -force

https://blogs.technet.microsoft.com...ll-to-easily-modify-registry-property-values/

Also, depending on your Server OS, you can add / remove / update regkeys directly as a policy (no need for logon script).

https://technet.microsoft.com/en-us/library/cc753092(v=ws.11).aspx?f=255&MSPPError=-2147217396

That's probably the simplest way. Create a GPO called Outlook Reg Settings (and it contains only these reg updates).

wijcc · 8 Feb 2017 at 21:00

The workstation os is win 7 pro and servers are win 2008 R2

Django x2 · 8 Feb 2017 at 21:44

Ok cool, so you'll be good to use either method in my last post.

wijcc · 9 Feb 2017 at 09:44

thank you, i will give the last method a try.