LGPO Local Group Policy Need Help with format

Content Authoring
1

I want to add a website in IE 11’s compatibility list, I figured out a way to do it with the registry file. And in order to push it to all users, I want to configure that in BigFix.

I have worked with simple registries with LGPO utility but this is one is difficult.

This is the text from my registry file which adds a website in IE 11 Compatiblity view list if run from desktop directly.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData]
"UserFilter"=hex:41,1f,00,00,53,08,ad,ba,01,00,00,00,36,00,00,00,01,00,00,00,\
  01,00,00,00,0c,00,00,00,9a,4d,5a,b9,2d,ca,d5,01,01,00,00,00,0c,00,65,00,64,\
  00,69,00,74,00,72,00,61,00,64,00,65,00,2e,00,63,00,6f,00,6d,00

I need help converting this to LGPO Utility format:

This what I have so far and it didn’t work:

// To use this template, update or remove the following blocks and replace the Relevance

// Enter your action script here

begin prefetch block

  add prefetch item name=LGPO.zip sha1=0c74dac83aed569607aaa6df152206c709eef769 size=815660 url=https://download.microsoft.com/download/8/5/C/85C25433-A1B0-4FFA-9429-7E023E7DA8D8/LGPO.zip sha256=6ffb6416366652993c992280e29faea3507b5b5aa661c33ba1af31f48acea9c4

  // Download UnZip utility
  add prefetch item name=unzip.exe sha1=e1652b058195db3f5f754b7ab430652ae04a50b8 size=167936 url=http://software.bigfix.com/download/redist/unzip-5.52.exe sha256=8d9b5190aace52a1db1ac73a65ee9999c329157c8e88f61a772433323d6b7a4a

collect prefetch items
end prefetch block

// Add LGPO.zip to the client utility cache
utility __Download\LGPO.zip

// Add unzip.exe to the client utility cache
utility __Download\unzip.exe

waithidden __Download\unzip.exe -o "{pathname of client folder of current site}\__Download\LGPO.zip" -d "{pathname of client folder of current site}\__Download"


action uses wow64 redirection false

delete __createfile
createfile until EOF_EOF_EOF
; ----------------------------------------------------------------------
; PARSING COMPUTER POLICY
; Source file:  \temp\Registry.pol

User
Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData
UserFilter
41,1f,00,00,53,08,ad,ba,01,00,00,00,36,00,00,00,01,00,00,00,\
  01,00,00,00,0c,00,00,00,9a,4d,5a,b9,2d,ca,d5,01,01,00,00,00,0c,00,65,00,64,\
  00,69,00,74,00,72,00,61,00,64,00,65,00,2e,00,63,00,6f,00,6d,00

; PARSING COMPLETED.
; ----------------------------------------------------------------------

EOF_EOF_EOF

delete regpol.txt
move __createfile regpol.txt

waithidden __Download\LGPO.exe  /t regpol.txt
continue if {exit code of action = 0}

Please help me fix this.

@JasonWalker @jgstew

2

Check the pdf documentation on the lgpo download, I believe you need to specify a type name for reg_binary values.

What I usually did was to configure local group policy once (manually), then use lgpo to dump to text, and then copy the txt into my fixlet.

1 Like
3 
; PARSING COMPUTER POLICY
; Source file:  \temp\Registry.pol

User
Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData
UserFilter
Binary:41,1f,00,00,53,08,ad,ba,01,00,00,00,36,00,00,00,01,00,00,00,\,\n
  01,00,00,00,0c,00,00,00,9a,4d,5a,b9,2d,ca,d5,01,01,00,00,00,0c,00,65,00,64,\,\n
  00,69,00,74,00,72,00,61,00,64,00,65,00,2e,00,63,00,6f,00,6d,00

; PARSING COMPLETED.

This is what it looks like now after adding “Binary” didn’t work.
I also added \n for line feed not sure if I used it correctly. The LGPO Pdf says only one line is allowed how do I put all these binary numbers in one line?

And I also tried this method where you backup the registry and parse it in txt file that shows other entries but not the one for compatibility list

4

You definitely don’t need the newline \n characters. I believe you can split the binary data across multiple lines as long as each line has a trailing continuation character \, just as it looks in the text export you made ; but if not, try putting all the binary on a single line amd remove the embedded continuation characters \ that were in the text export.

5

Thank you Jason.

This is what worked for me:

User
Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData
UserFilter
BINARY:41,1f,00,00,53,08,ad,ba,01,00,00,00,36,00,00,00,01,00,00,00,01,00,00,00,0c,00,00,00,9a,4d,5a,b9,2d,ca,d5,01,01,00,00,00,0c,00,65,00,64,00,69,00,74,00,72,00,61,00,64,00,65,00,2e,00,63,00,6f,00,6d,00

Thanks for all your help.

1 Like
6

This is basically my approach for almost everything. Do it the normal way, then export it, use that as a template.