Policy keys usually reside in HKLM or HKCU under Software\Policies or Software\Microsoft\Windows\CurrentVersion\Policies. Anything that an administrative template (.adm) configures outside of these areas are referred to as preferences because they won't be "undone" when you simply unlink the GPO that originally configured them. This is what we all lovingly refer to as "tattooing" something in the registry. Security policy works the same way in that to "undo" something you actually have to enforce the opposite setting. Regards, Jamie Nelson -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Mesidor, Jean Sent: Thursday, September 27, 2007 1:08 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] GPO Question When creating a policy via the GUI and not from custom ADM, which part of the settings that get tattooed in the registry? I was asked that question today and I am sure about the answer? Any help would be appreciated. Thanks, Jean *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************