Deploy Registry Entries

 

In keeping up with rebuilding servers at my company’s datacenter facility; I needed to figure out a way to deploy some registry settings customization to more than 8 servers running Internet Information Server 4.0.

Finally I found a way to accomplish what I was looking for. The Microsoft Windows NT and Windows 2000 Resource Kit includes a tool named "Regini.exe". This wonderful tool allowed me to create script files in the format of .ini files. Because most of our IIS servers are registry customized, I created a few scripts to automate the process of making registry changes instead of doing it manually, which takes some time on many servers. Here is a sample of the .ini file:

Sample Listing 1.
 

\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

DontDisplayLastUserName = REG_SZ 1

DeleteRoamingCache = REG_DWORD 0x00000001

LegalNoticeCaption = REG_SZ "Legal Notice"

LegalNoticeText = REG_SZ "You are accessing a proprietary computer system."

\Registry\Machine\System\CurrentControlSet\Control\FileSystem

NtfsDisable8Dot3NameCreation = REG_DWORD 0x00000001

 

Once you create the script file, all you need to do is run the "regini.exe" executable against the script. Example: Regini.exe C:\Temp\SecureIIS.ini

This awesome process saved me tons of time in deploying registry settings and guaranteeing that they were done properly. Did I mention you can also delete registry entries that you don’t want? Enjoy!