How to Deploy a Registry key via Group Policy in Active Directory.
This tutorial contains step-by-step instructions on how to deploy a registry key using Group Policy to computers in a domain environment.
Sometimes there is a need to add, remove, or edit a registry item on multiple computers in an Active Directory domain environment. In such a case you can create a new Group Policy Object (GPO) with the required registry changes that will be apply on all the domain computers. To perform this task, follow the instructions below.
How to Create, Delete or Update Registry keys on all Domain Computers using GPO.
1. Add, Delete or Modify Registry items with a GPO.
1. On your AD Server, open the Server Manager and then from Tools menu, open the Group Policy Management. *
* Additionally, navigate to Control Panel -> Administrative Tools -> Group Policy Management.
2. Under the 'Domains' object, right-click on your domain and select Create a GPO in this domain and Link it here.
3. Type a name for the new GPO (e.g. "Modify_Registry") and click OK.
4. Now right-click in the new GPO and select Edit.
5. In Group Policy Management Editor window, go to:
-
Computer Configuration > Preferences > Windows Settings > Registry
6. Then right-click at the Registry item and select New > Registry Item.
7. At the 'New Registry Properties' window, do the following:
a. At Action drop down menu, choose the type of registry modification action you want to perform:
- Create: To create and deploy a new registry item (Key or Value) in all domain computers (like in this example).*
- Replace: If the registry key already exists, it will delete and recreate the registry key.
- Update (default): To modify a Registry Value that already exists with a different value. (If the Registry value doesn't exist then it will be created)
- Delete: To remove a Registry item (e.g a Key with all its values and subkeys, or a single Registry Value).
* Note: In this example will show how to create a new registry DWORD value named "FileInfoCacheLifetime" with value data "0" at the following registry location:
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
b. At Hive select the Hive that you want to modify: eg. HKEY_LOCAL_MACHINE in this example.
c. At Key path click the three dots button 
and…
d. … then select the path of the Registry key* you want to modify (create, delete, or update), its registry values.
* Note: If you want to create a new registry key that does not already exist in the selected registry location, select the parent folder in which you want to create the new key, click Select, and then at the end type "\" and then the Name of the new registry key that you want to create. **
** Example: To create a new registry key named "TEST1" at the above mentioned registry location in this example, the key path should be:
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\TEST1
e. At Value Name type the name of the Registry Value you want to add/edit or delete in the selected registry location (e.g. "FileInfoCacheLifetime" in this example).
f. Now specify the Value Type of the registry value (e.g. "REG_DWORD" in this example), and then type its Value Data (eg. "0" in this example).
8. When done, click Apply > OK to save your changes.
9. Close the Group Policy Management Editor and restart any domain computer to apply the registry change, or run the "gpupdate /force" command. *
* Note: Repeat steps 6-8 to if you want to add, delete, or update more registry items, using the same GPO.
2. Deploy a REG File using a GPO Script.
If you own a registry (.REG) file exported from another computer and you want to deploy it (import it), on all other computers on your domain, do the following:
1. Use the steps 1-3 above to create a new GPO and then right-click on it a click Edit.
2. In Group Policy Management Editor window, go to:
-
Computer Configuration > Policies > Windows Settings > Scripts (Startup/Shutdown) > Startup.
3. In Startup Properties window:
a. Click the Show Files button…
b. ..and copy the REG file in the disk location* that opens.
eg. \\domain-name\SysVol\domain-name\Policies\{410CB9F6-E138-410E-9843-6A4C6D7D3CDE}\Machine\Scripts\Startup
4a. Then click the Add button.
4b. At the following window, do the following and then click OK:
-
At Script Name, type: regedit.exe
-
At Script Parameters, type: /s press SPACE and then type the name of the registry file that you want to deploy (e.g. "/s RegistryFile.reg" in this example).
5. Click Apply > OK to save the script.
6. Close the Group Policy Management Editor and restart any domain computer to apply the registry change.
That's it! Let me know if this guide has helped you by leaving your comment about your experience. Please like and share this guide to help others.
Frequently Asked Questions
What is the purpose of deploying a registry key using Group Policy in a domain environment?
Deploying a registry key using Group Policy in a domain environment allows administrators to add, remove, or modify registry items across multiple computers efficiently. This ensures consistency and compliance with organizational policies by applying the necessary changes to all domain computers through a centralized management system.
How do I create a new Group Policy Object (GPO) for registry changes?
To create a new GPO for registry changes, open the Server Manager on your AD server and navigate to the Group Policy Management from the Tools menu. Right-click on your domain under the 'Domains' object and select 'Create a GPO in this domain and Link it here'. After naming the new GPO (e.g., 'Modify_Registry'), click OK to proceed.
What steps are involved in editing the registry settings through GPO?
Once you have created a GPO, right-click on it and select 'Edit'. In the Group Policy Management Editor window, navigate to 'Computer Configuration > Preferences > Windows Settings > Registry'. Here, right-click on the 'Registry' item, select 'New > Registry Item', and specify the desired modifications: such as action (Create, Replace, Update, or Delete), the Hive to modify, the Key path, and the Value Name and Data.
Can I deploy a .REG file using a GPO, and how?
Yes, you can deploy a .REG file using a GPO by creating a new GPO and editing it. Use the steps 1-3 to create a new GPO, then right-click on it to edit. In the Group Policy Management Editor, navigate to the appropriate settings where you can import the .REG file across all computers in your domain.
- How to Add a Shared Calendar in Outlook for Web (OWA) - May 20, 2026
- How to Stop Windows 11 from Downgrading GPU Drivers. - May 18, 2026
- How to Update Third-Party Apps via Intune using WinGet AutoUpdate for Intune. - May 14, 2026
