I have a registry setting that I need to change for all users on my domain. This setting however can not be modified on a few lab machines that many of the same users log onto.
I have created a user GPO (called RegModify) to update the HKCU registry key and its scope is authenticated users. It is currently linked to my custom users OU.
I have another user GPO (called RegDefault)that has the default HKCU key set. The scope is a security group that I have created that contains the computers. I have loopback processing enabled and set to merge (also tried replace without luck). I have this linked at the domain level.
The registry setting change is being applied properly to my user accounts. When I log onto one of my lab computers the key is not reverting back to the default. If, however, I put user accounts in the RegDefault scope, it works.
How can I get my RegDefault GPO to work with computer accounts instead of user accounts?
The true sign of intelligence is not knowledge but imagination. -Albert Einstein
I'm a bit confused about your scenario. Are those lab machines in their own OU? If they are, then what you should do is link that RegDefault GPO that enables loopback and sets the default reg value to the OU where your lab machines are and leave the security filtering on that GPO at the default. That will ensure that all users who log into those machines will get the default value.