Setting a registry key for everyone except for a specific group.

hi,

i trying set registry key disable/enable instant messaging in communicator 2007.  we use terminal server 2003.  i have set 2 gpos set following reg key disable im (=1) or enable im (=0)

the reg key //hkcu/software/policies/microsoft/communicator/disableim

when set default domain policy disable im , gpo under users (scoped communicator allowed group) enable im no 1 can use im, when set user gpo enforce...

we want have communicator running users presence application, while members of senior management can use im.

any appreciated.

thanks

dan

do have group policy client side extensions installed on server?  if do, can try following option

configure  setting via group policy preferences.  have remove current "standard" policy setting have in place disable desktop communicator.

after doing can either configure default domain policy or create new one to target communicator specifically. 

to first create security group senior management members part of , create single gpo (or add existing one) 2 preference registry settings. 

1 under user configuration create registry preference "replace" //hkcu/software/policies/microsoft/communicator/disableim current value 1 (disabled). 

2 click on common tab , click both check boxes for "apply once , not reapply" , "item-level targeting".

3 click targeting... click on new item , select security group, click browse , search security group created.

4 once selected click on "item options" , select "is not" (what apply registry change user logs in , not member security group specified)

5 create description preference if , accept changes.

for second preference repeate steps above however:

in step one, change value 0 (enabled)

in step 4 select "is"

hope helps

Windows Server  >  Group Policy