Microsoft released their new version of LGPO, v2.2, at the end of June. Details at https://www.microsoft.com/en-us/download/details.aspx?id=55319
The new release adds support for MLGPO, REG_QWORD data types, and a CLEAR directive to return settings to “Not Configured”.
I’ve uploaded an example fixlet for using LGPOv2.2 at https://bigfix.me/fixlet/details/24619
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\QuietHours] “Enable”=dword:00000001 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications] “NoToastApplicationNotification”=dword:00000000 I want to install this two reg using lgpo.exe /t lgpo.txt. your script put in hklm key. how to do it for current user or all users.
Check the example fixlet I linked and change the Registry Policy to
createfile until EOF_EOF_EOF
; ----------------------------------------------------------------------
; PARSING COMPUTER POLICY
; Source file: \temp\Registry.pol
User
Software\Policies\Microsoft\Windows\CurrentVersion\QuietHours
Enable
DWORD:1
User
Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications
NoToastApplicationNotification
DWORD:0
; PARSING COMPLETED.
; ----------------------------------------------------------------------
EOF_EOF_EOF
I did That.Did not work. interesting part is it work manually but not via bigfix
//**Begin Preparation Marker
// Download all specified files
begin prefetch block
add prefetch item name=37357C2355198DB995F5328CB1A06328F33DA540 sha1=37357c2355198db995f5328cb1a06328f33da540 size=410088 url=SWDProtocol://127.0.0.1:52311/Uploads/37357C2355198DB995F5328CB1A06328F33DA540/LGPO.exe.bfswd sha256=f218db26d05c80d105dc779ba4e99c72f37ffc9f78d70d359bbe230713b765b4
end prefetch block
// All SWD files will go into a folder in the clients __BESData folder. This folder gets cleared on every restart.
Parameter “baseFolder” = "C:\MSC\LGPO"
Dos rd “C:\MSC\LGPO” /s /q
Dos mkdir “C:\MSC\LGPO”
// Move files into subfolders and unescape file names
move “__Download/37357C2355198DB995F5328CB1A06328F33DA540” “{parameter “baseFolder”}LGPO.exe”
//action uses wow64 redirection false
delete __createfile
createfile until EOF_EOF_EOF
User
Software\Policies\Microsoft\Windows\CurrentVersion\QuietHours
Enable
DWORD:1
User
Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications
NoToastApplicationNotification
DWORD:0
EOF_EOF_EOF
delete "c:\MSC\LGPO\regpol.txt"
move __createfile “C:\MSC\Lgpo\regpol.txt”
//waithidden “{parameter “baseFolder”}LGPO.exe” /t C:\MSC\lgpo\regpol.txt
// Jason - i tried the above and below command and it did not work
wait cmd.exe /C C:\MSC\LGPO\LGPO.exe /t C:\MSC\lgpo\regpol.txt
continue if {exit code of action = 0}