Make GPO changes from a batch file?

[wildcat]

Hi I'm confused and seeking guidance.

I physically manage well over 100 systems on a hardware level and very little on a software level. Yet, there are many tiny modification I've install to keep things running for the end users.

The only time I actually interact with the system on a software level is when I reinstall it. A customized corp. edition of Windows gets deployed and during the installation pretty much everything gets installed except for my tiny modification. These I'll inject with one batch file, right before I deploy the system on it's physical location.

I've to set some GPO screensaver settings for "all users" to force the use of a screen saver that logs users off after a set period of time.

I'm unable to inject registry settings on current user level, because the users don't have admin rights.

The registry solution posted doesn't really work for me. I've to set it in the GPO manually and locally. I'm not allowed nor have access to push this out to other systems through GPO.

So I'm wondering if I can make GPO changes through the use of a batch file?

 

[emaraszek]

You don't have access to the OU that contains these machines?

 

[wildcat]

Nope, no access.

 

[Brink]

Hello Wildcat,

You might see if you may be able to make registry changes using a BAT file that will in effect change the GPO.

REG ADD "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v SCRNSAVE.EXE /t REG_SZ /d "[B][COLOR=red]full-path-to-screensaver.scr-you-want[/COLOR][/B]"
 
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Control Panel\Desktop" /v SCRNSAVE.EXE /t REG_SZ /d "[B][COLOR=red]full-path-to-screensaver.scr-you-want[/COLOR][/B]"

Hope this may help,
Shawn