Thanks to everyone in this thread, I'm almost ready to deploy 1.2.1.0 into my workplace domain.
The only part I'm having trouble with is the "Advanced" settings section, replicating these as scripts/GPO policies.
Kay, you've said:
Some expert settings that represent Windows Settings are not backed up/restored by SuRun. You can change these settings directly with ADM files or by using subinacl.exe.
The most important function I'm trying to replicating using scripts/GPO is "Set 'Administrators' instead of 'Object Creator' as default owner for objects created by Administrators.
Could you please describe in detail how to achieve this function through scripting/GPO, in Windows 2008R2 and Windows 7? If I can just figure this out, I'll be ready to deploy and kill the horrible setup I've inherited from previous network admin!
Also, as a secondary, it would be great to understand how to set each of the 5 "Convenience settings" on/off using command line, or group/security policy?
Actually, I already know three:
1) Allow 'SuRunners' to change 'Power Options' and to select power schemes:
"subinacl.exe /keyreg "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVerion\Controls Folder\PowerCfg" /grant=SuRunners=F"
2) Show Windows update notifications to all users (if automatic updates are activated).
GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Update
Setting: Allow non-administrators to receive update notifications
3) No auto-restart for scheduled Automatic Windows Updates installations
GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Update
Setting: No auto-restart with logged on users for scheduled automatic updates installation
Thank you so much!