Distributing Custom Modifications to 4000 Windows Boxen?

kenp2002 asks: "I recently tried to disable my Sleep Key on a Dell GX150. I found several ways to do this manually, but now I have to find a way to script a solution to do this on over 4000 machines! I tried keyboard re-mapping both through tools (which didn't see any ACPI keys) and through Microsoft's documentation (the old HKLM\Keyboard Layout change). Does anyone know of a solution on how to either remap or disable the Sleep key through a script or a really good internet resource where I can find information on issues like this? Keyboard filter drivers are not an option unless it can auto-install itself."

"I am on several Linux mailing lists but have never found a good NT mailing list where I can ask such questions from other admins.

I am stumped and Appdeploy wasn't much help, either.

I must prevent users from putting the machine into suspend and amazingly Microsoft will prevent a user, through administrative policy, from turning the machine off, but not suspending it! Any suggestions would greatly reduce my stress level and earn my eternal gratitude. "

Comments

In a domain?

[AnalogBoy]

What i would try:

1: Use a pro duct called "Advanced Registry Tracer" [search for it, you'll find it] to see the registry change made when you modify it from the Power options > Advanced control panel applet (granted you're using 2000 or XP). On a side note, ART is a kickass tool. There are many handy little uses for it.

2: If you are in a domain, simply assign a startup script. Execute a batchfile which updates the registry via a .reg file. Simply drop a token file out somewhere and run an if loop to prevent it from having to do it each and every time. If you're not in a domain, hire cheap help...

Dell OpenManage

[MImeKillEr]

Dell has a utility called OpenManage that allows you to push BIOS updates, update certain drivers, etc. from a centralized computer on the domain. I've only used it in the testing labs (I'm at Dell) so I don't know the street price of this app.

More info would help

[kawika]

Are these boxes running NT with Dell "enhancements" or is this really 2000 or XP? NT didn't support power management so any that's in there is from Dell.

If these are 2000/XP boxes, do you have WMI enabled? If so you could connect to each box through a script and change the appropriate registry setting. You can also use WMI if you have explicitly installed it on NT. If you have 4000 Windows boxes you should definitely already be using WMI.

Do you have a common company-wide home page set for these users? Do they use IE4 or higher? If yes to both, you could put an ActiveX control on that home page and have it make the changes you need. Since your company home page is on the network behind the firewall it will be in the "local intranet" security zone and the user won't be queried when the ActiveX is installed.

Good NT/2k/XP mailing list

[extra88]

WINNT-L: Windows NT/2000 Discussion List is a good place to ask questions and look for answers. Their archive is online but you have to be subscribed to search it. I think they host some other good mailing lists but I'm only subscribed to this one.

Re:rsh

[earlytime]

on the same vein as rsh, try using psexec from www.sysinternals.com. If you know a username:password ( you better as an admin! ), you can run commands using the netbios interface. Just use a bash like script:

for i in `net view \\domain` ; { psexec.exe \\$i \\fileserver\share\regscript.reg ; }

something like that
-earl

Re:GHOST?

[dodald]

Ghost isn't as easy as you think, I was in charge of upgrading 800 machines to support Ghost. 1st You must (or atleast should) create an image for each type of machine. 2nd, in order to use ghost from the network, you must create a ghost partition, and install a ghost service. In order for this guy to install his keyboard fix, he would need to physically touch EVERY machine on his network. I, personally, would wait untill your next MAJOR upgrade to install Ghost. (Although he is probably already using it, just not the console server.)

On a more positive note, if you have 4000 machines and you don't have ghost GET IT, you NEED IT! You'll save 1000's of hours building machices. I personally loaded 100 machince from no OS-to ready to put on the floor (each with a unique hostname and static-ip address) in about 1 hour.

Addendum

[kenp2002]

I was actually more poking around from some good mailing lists to subscribe to versus answers. I am very greatful for the responses. The problem with scripting and what not is they are Kiosk systems made for us by Dell. I can only push to the machine via an FTP script (These machines are the most ultra-locked down systems I have seen in my 7+ years consulting!). I found a keyboard filter driver to use and a M$ tool called devcon to auto install it. I am still searching for a few good NT/2000/XP mailing lists to subscribe to. The problem has been soved thanks to the help of the slashdot community. Now I just need some leads on Uber mailing lists to join! Thanks again people, you've been a great help.