{"id":74849,"date":"2023-06-05T13:09:14","date_gmt":"2023-06-05T17:09:14","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=74849"},"modified":"2024-10-16T17:23:16","modified_gmt":"2024-10-16T21:23:16","slug":"create-your-own-windows-policy-using-registry-keys","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys","title":{"rendered":"Create Your Own Windows Policy Using Registry Keys"},"content":{"rendered":"\n<p>If your team needs a&nbsp;<a target=\"_blank\" href=\"https:\/\/jumpcloud.com\/product\/policies#policies\" rel=\"noreferrer noopener\">Windows policy<\/a>&nbsp;that isn&#8217;t currently available in JumpCloud, you can use the JumpCloud&nbsp;<strong>Advanced: Custom Registry Keys Policy<\/strong>&nbsp;to manage the specific registry keys you need all in one place, and see which systems have the registry changes applied. Creating your own Windows policy has these additional benefits:<\/p>\n\n\n\n<ul>\n<li>Makes the transition from AD to JumpCloud\u2019s directory-as-a-service more seamless. If you\u2019re used to managing systems in AD using GPOs, JumpCloud\u2019s policies will seem very familiar.<\/li>\n\n\n\n<li>Provides a higher level of assurance that your changes are applied compared to running a one-time command. If a system is offline and you run a command to configure a registry key, the changes won\u2019t apply. However, if you create a policy and apply it to a system that\u2019s offline, it\u2019s applied as soon as the system comes online. Using a policy lets you easily verify that the systems needing policies are secured.<\/li>\n\n\n\n<li>All of the registry keys you can set in this policy can also be set using the JumpCloud PowerShell module. To edit a registry programmatically, you must be experienced with coding. For advanced users, refer to the Microsoft documentation on&nbsp;<a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/wmisdk\/changing-registry-data#creating-a-named-registry-value-using-powershell-and-vbscript\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Creating a Named Registry Value Using PowerShell and VBScript<\/a>.<\/li>\n\n\n\n<li>It is possible to have multiple custom Windows policies, as long as the registry keys are unique. For more information, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/windows-policy-conflicts\" target=\"_blank\" rel=\"noreferrer noopener\">Windows Policy Conflicts<\/a>.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>This policy is only supported on&nbsp;<strong>Windows 10<\/strong>,&nbsp;<strong>Windows 11<\/strong>,&nbsp;<strong>Server 2016<\/strong>,&nbsp;<strong>Server 2019<\/strong>, and<strong>&nbsp;Server 2022<\/strong>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>Windows operating systems cannot function without a registry. A registry with erroneous data can cause the system to perform poorly, incorrectly, or not at all. Because of the central role played by the registry, it\u2019s essential that you\u2019re familiar with managing Windows systems using registry keys before making any modifications. We don\u2019t recommend you experiment with the registry or change any settings if you don\u2019t understand them completely.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Disclaimer:<\/strong>&nbsp;JumpCloud isn\u2019t responsible for damage to systems that you may cause with your custom policies. We recommend you carefully test your custom policies before applying them to live systems.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Anatomy of a Registry Key<\/h2>\n\n\n\n<p>The registry is a hierarchical database that stores the values of variables in Windows and the applications and services that run on Windows. Registry keys are the base unit of organization in the registry and can be compared to folders in File Explorer.<\/p>\n\n\n\n<ul>\n<li>A key can have sub keys, just as a folder can have subfolders.<\/li>\n\n\n\n<li>Each key can also have multiple values associated with it just as a folder can have multiple files in it.<\/li>\n<\/ul>\n\n\n\n<p>Values are used to store the information &#8211; for example, information about an application installed on a system such as color settings, screen location and size, or recognized file extensions.<\/p>\n\n\n\n<p>Let\u2019s look at a key you can use to control if your users can install extensions for Chrome.<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>Software\\Policies\\Google\\Chrome\\BlockExternalExtensions<\/p>\n<\/div><\/div>\n\n\n\n<p>All keys have four components that you must specify, including:<\/p>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n    <h3 class=\"wpdt-c\"\n        id=\"wdt-table-title-59\">Registry Key Components<\/h3>\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n    >\n        <table id=\"wpdtSimpleTable-59\"\n           style=\"border-collapse:collapse;\n                   border-spacing:0px;\"\n           class=\"wpdtSimpleTable wpDataTable\"\n           data-column=\"3\"\n           data-rows=\"5\"\n           data-wpID=\"59\"\n           data-responsive=\"0\"\n           data-has-header=\"1\">\n\n                    <thead>        <tr class=\"wpdt-cell-row \" >\n                            <th class=\"wpdt-cell wpdt-tc-000000 wpdt-align-left wpdt-bold\"\n                                    data-cell-id=\"A1\"\n                data-col-index=\"0\"\n                data-row-index=\"0\"\n                style=\" width:17.035775127768%;                padding:10px;\n                \"\n                >\n                                Component\u00a0\u00a0                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-bold\"\n                                    data-cell-id=\"B1\"\n                data-col-index=\"1\"\n                data-row-index=\"0\"\n                style=\" width:38.671209540034%;                padding:10px;\n                \"\n                >\n                                Description                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-bold\"\n                                    data-cell-id=\"C1\"\n                data-col-index=\"2\"\n                data-row-index=\"0\"\n                style=\" width:44.293015332198%;                padding:10px;\n                \"\n                >\n                                In our\u00a0example                <\/th>\n                                        <\/tr>\n                    <tbody>        <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"A2\"\n                data-col-index=\"0\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Location                <\/td>\n                                            <td class=\"wpdt-cell wpdt-wrap-text wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"B2\"\n                data-col-index=\"1\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><p>A valid root directory where the data is located within the registry structure.<\/p>\n<p>All keys in this policy are in the HKEY_LOCAL_MACHINE (HKLM) hive and you don&rsquo;t need to specify this.<\/p>\n<ul>\n<li>We recommend referencing locations that start with SOFTWARE\\Policies.<\/li>\n<li>There&rsquo;s a 255-character limit.<\/li>\n<li>Key names are not case sensitive.<\/li>\n<\/ul>\n<p>Examples:<\/p>\n<ul>\n<li>Software\\Policies\\Google\\Chrome\\BlockExternalExtensions<\/li>\n<li>Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System<\/li>\n<\/ul><\/div>                <\/td>\n                                            <td class=\"wpdt-cell wpdt-wrap-text wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"C2\"\n                data-col-index=\"2\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><p><strong>HKLM<\/strong> is the root hive and is implied<\/p>\n<p>&nbsp; &nbsp; <strong>Software<\/strong> is the root key<\/p>\n<p>&nbsp; &nbsp; &nbsp; <strong>Policies<\/strong> is the sub key<\/p>\n<p>&nbsp; &nbsp; &nbsp; &nbsp;<strong>Google<\/strong> is the next sub key<\/p>\n<p>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;<strong>Chrome<\/strong> is the last sub key&nbsp;<\/p><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"A3\"\n                data-col-index=\"0\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Value                <\/td>\n                                            <td class=\"wpdt-cell wpdt-wrap-text wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"B3\"\n                data-col-index=\"1\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><p>The name of the value for the registry key being modified.<\/p>\n<ul>\n<li>You can&rsquo;t leave this empty.<\/li>\n<li>There&rsquo;s a 99-character limit.<\/li>\n<li>Key names are not case sensitive.<\/li>\n<\/ul><\/div>                <\/td>\n                                            <td class=\"wpdt-cell wpdt-wrap-text wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"C3\"\n                data-col-index=\"2\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                BlockExternalExtensions                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"A4\"\n                data-col-index=\"0\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Type                <\/td>\n                                            <td class=\"wpdt-cell wpdt-wrap-text wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"B4\"\n                data-col-index=\"1\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><p>A description of how the Data is formatted.<\/p>\n<p>You can select from the following types we support:<\/p>\n<ul>\n<li>DWORD<\/li>\n<li>EXPAND_SZ<\/li>\n<li>MULTI_SZ<\/li>\n<li>SZ<\/li>\n<li>QWORD&nbsp;<\/li>\n<\/ul>\n<p>For a description of all types, refer to the Microsoft documentation on <a href=\"https:\/\/support.microsoft.com\/en-za\/help\/256986\/windows-registry-information-for-advanced-users\">Windows registry information for advanced users<\/a>.<\/p><\/div>                <\/td>\n                                            <td class=\"wpdt-cell wpdt-wrap-text wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"C4\"\n                data-col-index=\"2\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><p><strong>REG_DWORD&nbsp; <\/strong><\/p>\n<p>Specifies that Data is a 4-byte long number (a 32-bit integer). This type is displayed in Registry Editor in binary, hexadecimal, or decimal format.<\/p><\/div>                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-valign-top wpdt-align-left\"\n                                    data-cell-id=\"A5\"\n                data-col-index=\"0\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Data                <\/td>\n                                            <td class=\"wpdt-cell wpdt-wrap-text wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"B5\"\n                data-col-index=\"1\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\"><p>A number, text string, or array that you use to enable a setting or specify a value, dependent on the Type you select. Enter multi-string values as new lines of text.<\/p>\n<ol>\n<li>We recommend limiting the size of all data values to 2K.<\/li>\n<li>Learn about <a href=\"https:\/\/docs.microsoft.com\/en-us\/openspecs\/windows_protocols\/ms-rprn\/25cce700-7fcf-4bb6-a2f3-0f6d08430a55\">Microsoft&rsquo;s formatting requirements<\/a>.<\/li>\n<\/ol><\/div>                <\/td>\n                                            <td class=\"wpdt-cell wpdt-wrap-text wpdt-align-left wpdt-valign-top\"\n                                    data-cell-id=\"C5\"\n                data-col-index=\"2\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                <div data-type-content=\"wpdt-html-content\">\n<p>0x00000001 (1)<\/p>\n<p>Where:<\/p>\n<p>0 = False (The user can install Chrome extensions.)<\/p>\n<p>1 = True (The user can&rsquo;t install Chrome extensions.)<\/p>\n<\/div>                <\/td>\n                                        <\/tr>\n                    <\/table>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">How Do I Know Which Registry Key to Set?<\/h2>\n\n\n\n<p>Usually, when you make a change to a group policy object, Windows creates or modifies registry values. If you want to find out what registry settings are being changed for Windows policies you have in place, there are a few ways to do it:<\/p>\n\n\n\n<ul>\n<li><a target=\"_blank\" href=\"https:\/\/gpsearch.azurewebsites.net\/\" rel=\"noreferrer noopener\">Group Policy Search<\/a>&nbsp;website. Under the Details section, you see the registry key that\u2019s being modified right next to the Registry Key heading. The registry value name is specified right next to the Value heading. For the value data, you will find it at the bottom of the Explanation section.<\/li>\n\n\n\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/powershell\/module\/grouppolicy\/get-gpregistryvalue?view=win10-ps\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Get-GPRegistryValue<\/a>&nbsp;is a PowerShell cmdlet that retrieves one or more registry-based policy settings under either Computer Configuration or User Configuration in a Group Policy Object (GPO).<\/li>\n<\/ul>\n\n\n\n<p>If you don\u2019t have policies in place yet or aren\u2019t sure what to use, you can find information on the registry keys in the following ways:<\/p>\n\n\n\n<ul>\n<li><a target=\"_blank\" href=\"https:\/\/admx.help\/\" rel=\"noreferrer noopener\">Group Policy Administrative Templates Catalog<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?displaylang=en&amp;id=25250\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Group Policy Settings Reference for Windows and Windows Server<\/a>. You can download spreadsheets that list the policy settings for computer configurations included in the Administrative template files delivered with Windows operating systems.<\/li>\n<\/ul>\n\n\n\n<p>Keep in mind that you can also use Registry Editor to view and export keys to see what you should use when specifying the key location, value, data, and type.<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/support.microsoft.com\/en-us\/help\/305097\/how-to-view-the-system-registry-by-using-64-bit-versions-of-windows\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">How to view the system registry by using 64-bit versions of Windows<\/a><\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>We\u2019ve also provided some&nbsp;<a href=\"#registry-key-examples\">examples of common registry keys<\/a>&nbsp;at the end of this article for your reference.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>Changing registry settings can produce unexpected, contradictory, or uninterpretable instructions in the operating system and application programs. Editing registry settings can also degrade the performance of your system, obscure the location of essential files, or invalidate your Windows licensing agreement.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Best Practices<\/h2>\n\n\n\n<p>You should use the following procedures that our developers and testers prescribe because they produce the best results when working with Windows Custom policies. If you comply with these practices and encounter issues, refer to the&nbsp;<a href=\"#troubleshooting\">Troubleshooting<\/a>&nbsp;section.<\/p>\n\n\n\n<p><strong>Avoid conflicting policies.<\/strong>&nbsp;We recommend checking the policies that you\u2019ve already applied to your systems before applying custom policies. For best results, and due to the complex nuances of registry keys, we recommend you choose to use either custom policies or the standard JumpCloud policies, but not both. This precaution ensures that your policies aren\u2019t conflicting with each other or using the same registry key.<\/p>\n\n\n\n<p>If you previously created a standard policy and then create a custom policy that conflicts, you experience the following behavior:<\/p>\n\n\n\n<ul>\n<li>Standard policies override custom policy settings after about 10-20 minutes.<\/li>\n\n\n\n<li>This timer starts when a custom policy is applied or whenever the agent is restarted on a system.<\/li>\n<\/ul>\n\n\n\n<p>If there are no conflicts, all policies are applied.<\/p>\n\n\n\n<p><strong>Don\u2019t create duplicate policies.<\/strong>&nbsp;If you\u2019re using a standard policy that you think might be configuring the same registry key that you want to use in a custom policy, we recommend the following actions:<\/p>\n\n\n\n<ul>\n<li>Choose between using a standard JumpCloud policy or a custom policy, not both<\/li>\n\n\n\n<li>Remove the standard policy first, then apply a custom policy<\/li>\n<\/ul>\n\n\n\n<p><strong>Don&#8217;t use the Security\\ registry key location.<\/strong>&nbsp;At this time, JumpCloud doesn&#8217;t support&nbsp;keys in this&nbsp;location with this policy.&nbsp;<\/p>\n\n\n\n<ul>\n<li>To better understand security policies, you can find more information on the Security Option settings in Local Security Policy editor (secpol.msc) in Microsoft\u2019s documentation on&nbsp;<a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/security\/threat-protection\/security-policy-settings\/security-options\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Security Options.<\/a><\/li>\n<\/ul>\n\n\n\n<p><strong>Before you begin<\/strong><\/p>\n\n\n\n<ul>\n<li><strong>Meet system prerequisites.<\/strong>\n<ul>\n<li>This policy works on&nbsp;<strong>Windows 10<\/strong>,&nbsp;<strong>Server 2016<\/strong>&nbsp;and&nbsp;<strong>Server 2019<\/strong>. Attempting to apply it to any other versions won\u2019t work.<\/li>\n\n\n\n<li><strong>Enable Powershell<\/strong>&nbsp;&#8211; disabling pwsh prevents policies from being applied.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Plan on testing.<\/strong>&nbsp;We recommend you always test a newly created policy in a test environment before you apply it to your entire organization. If that isn\u2019t possible, then test your custom policy on a single system before you apply it to all systems and system groups.<\/li>\n\n\n\n<li><strong>Enforcement at the system level.<\/strong>&nbsp;Custom policies are applied to systems, not users. When you apply a custom policy to a system, this policy is enforced no matter which user is logging in to use the system.<\/li>\n\n\n\n<li><strong>Deleting custom policies<\/strong>. When you delete a custom policy the behavior you see depends on the location of the key in the registry. The key value is either deleted or left intact. For details, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys\">Deleting Custom Policies<\/a>.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Create a custom Windows Policy<\/h2>\n\n\n\n<p>To create a custom Windows policy:<\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:&nbsp;<a href=\"https:\/\/console.jumpcloud.com\/login\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>Policies<\/strong>.<\/li>\n\n\n\n<li>Click&nbsp;<strong>(+)<\/strong>.<\/li>\n\n\n\n<li>On the&nbsp;<strong>Configure New Policy<\/strong>&nbsp;page select&nbsp;<strong>Windows<\/strong>.<\/li>\n\n\n\n<li>From the list, next to&nbsp;<strong>Advanced: Custom Policy<\/strong>&nbsp;click&nbsp;<strong>configure<\/strong>.<\/li>\n\n\n\n<li>On the&nbsp;<strong>New Policy<\/strong>&nbsp;panel, optionally enter a new name for the policy, or keep the default. Policy names must be unique.<\/li>\n\n\n\n<li>Under&nbsp;<strong>Settings<\/strong>, in&nbsp;<strong>Registry Key Location<\/strong>, type one of the following first:&nbsp;<strong>System\\<\/strong>,&nbsp;<strong>Software\\<\/strong>,&nbsp;<strong>Hardware\\<\/strong>, or&nbsp;<strong>Sam\\<\/strong>&nbsp;and then add the location. For example, Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System.<\/li>\n\n\n\n<li>Under&nbsp;<strong>Settings<\/strong>, in&nbsp;<strong>Value Name<\/strong>, type a string of characters&nbsp;for the registry key you want to modify.&nbsp;<\/li>\n\n\n\n<li>Under&nbsp;<strong>Settings<\/strong>, in&nbsp;<strong>Type<\/strong>, select how the data is formatted.<\/li>\n\n\n\n<li>Under&nbsp;<strong>Settings<\/strong>, in&nbsp;<strong>Data<\/strong>, type in the string of characters, number, or array as specified in&nbsp;<strong>Type<\/strong>.<\/li>\n\n\n\n<li>Under&nbsp;<strong>Settings<\/strong>, to add additional values or keys,&nbsp;click&nbsp;<strong>add registry key<\/strong>.<\/li>\n\n\n\n<li>To add more registry keys, repeat steps 7-11.<\/li>\n\n\n\n<li>Click the&nbsp;<strong>System Groups<\/strong>&nbsp;tab. Optionally, select one or more system groups to apply this policy to. For system groups with multiple OS member types, the policy is applied only to the supported OS.<\/li>\n\n\n\n<li>Click the&nbsp;<strong>System<\/strong>&nbsp;tab. Optionally, select one or more system groups to apply this policy to.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save policy<\/strong>.<\/li>\n\n\n\n<li>Restart all systems where you apply this policy before it takes effect.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"troubleshooting\">Troubleshoot Custom Policies<\/h2>\n\n\n\n<p>Due to the number and complexity of registry keys that Windows provides, JumpCloud can\u2019t detect if multiple policies are using the same registry keys. If you see errors, they probably won\u2019t happen when creating, saving, or applying a custom policy.<\/p>\n\n\n\n<ul>\n<li>It\u2019s more likely to see errors only in the event log after the agent attempts to apply the policy on a system and finds conflicts.<\/li>\n\n\n\n<li>You may not see errors in the Administrator Portal, and a policy can still have a status of&nbsp;<strong>successfully applied<\/strong>&nbsp;even if there are errors in the event log.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Replacing a corrupt registry.pol file<\/h3>\n\n\n\n<p><strong>Corrupt registry.pol file<\/strong><br>The Group Policy Object Editor stores registry-based configuration settings in the Registry.pol file. If a system gets into a bad state, you can re-create the file.<\/p>\n\n\n\n<p><strong>To replace a corrupt registry.pol file:<\/strong><\/p>\n\n\n\n<ol>\n<li>Find the registry file:&nbsp;<strong>C:\\Windows\\System32\\GroupPolicy\\Machine\\Registry.pol<\/strong><\/li>\n\n\n\n<li>Rename or delete the registry.pol file.<\/li>\n\n\n\n<li>Restart the system or to re-create the file, run&nbsp;<strong>gpupdate \/force<\/strong><\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Checking the Administrator Portal for errors<\/h3>\n\n\n\n<p>To check the Administrator Portal for errors:<\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to&nbsp;<strong>Policies<\/strong>.<\/li>\n\n\n\n<li>Select the custom policy you created.<\/li>\n\n\n\n<li>On the custom policy\u2019s&nbsp;<strong>Settings<\/strong>&nbsp;screen, select the&nbsp;<strong>Status<\/strong>&nbsp;tab.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Checking the JumpCloud agent log file for errors<\/h3>\n\n\n\n<p>To check the JumpCloud agent log file for errors:<\/p>\n\n\n\n<ol>\n<li>Log in to the local system.<\/li>\n\n\n\n<li>Open the following file:&nbsp;<strong>C:\\Windows\\Temp\\jcagent.log<\/strong><\/li>\n\n\n\n<li>When a custom policy is causing errors, the event log lists the following Event IDs:<\/li>\n<\/ol>\n\n\n\n<ul>\n<li><strong>1125<\/strong>: The processing of Group Policy failed because of an internal system error. Please see the Group Policy operational log for the specific error message. An attempt will be made to process Group Policy again at the next refresh cycle.<\/li>\n\n\n\n<li><strong>1500<\/strong>: The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy.<\/li>\n\n\n\n<li><strong>4657<\/strong>: A registry value was modified.<\/li>\n\n\n\n<li><strong>4660<\/strong>: An object was deleted.<\/li>\n\n\n\n<li><strong>4661<\/strong>: A handle to an object was requested.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Command Argument Limits<\/h3>\n\n\n\n<p>In PowerShell a limit of 31744 characters exists.&nbsp; If this limit is exceeded, the custom policy will not work.<br>The following error message appears in the logs:<\/p>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p>Failed to build command arguments for policy &#8216;custom_registry_keys_policy_windows&#8217;: Failed to create PowerShell arguments (length 64203) since they exceed the max length of 31744<\/p>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Delete Custom Policies<\/h2>\n\n\n\n<p>When you delete a custom policy the behavior you see depends on the location of the key in the registry. Results can vary from a key existing with no set value, to the value set by the custom policy remaining intact even after deleting the policy<\/p>\n\n\n\n<p><strong>Best Practices<\/strong><\/p>\n\n\n\n<ul>\n<li><strong>Reset rather than delete.<\/strong>&nbsp;We recommend you modify the key\u2019s value to the default or the original, then reapply the policy. You get consistent results that work as expected. If you just remove the entry, you see more variable behavior.<\/li>\n\n\n\n<li>You can create one policy instance with multiple unique keys or you can create multiple custom policy instances. If you apply more than one custom policy instance to a system or system group they must have unique registry keys, or they will conflict.&nbsp;For more information, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/windows-policy-conflicts\" target=\"_blank\" rel=\"noreferrer noopener\">Windows Policy Conflicts<\/a>.<\/li>\n\n\n\n<li><strong>Know that deleting&nbsp;an entire policy produces variable results.<\/strong>\n<ul>\n<li>For keys in&nbsp;<strong>Software\\Policies<\/strong>&nbsp;&#8211; deleting the policy deletes the modified value(s) under a key. After you delete this policy, the key still exists but with no values set for the modified entries. For example, a key is added that has five values.\n<ul>\n<li>If you set two of those five values and then delete this policy, those two values are removed. The other three unmodified values remain in the registry under the key.<\/li>\n\n\n\n<li>If you set all five values, the entire key is removed when you delete the policy.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>For keys in&nbsp;<strong>Software\\ (other than Software\\Policies), System\\, Hardware\\, or Sam\\<\/strong>&nbsp;&#8211; deleting this policy leaves the registry key intact as it was set in the policy.\n<ul>\n<li>In this case, any values set by the policy are not reset.<\/li>\n\n\n\n<li>If you\u2019d like to reset the values, you need to do it manually. Either re-apply the policy with the original values for the key or edit the values in the Registry Editor.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Deleting a row entry.<\/strong>\n<ul>\n<li>For keys in&nbsp;<strong>Software\\Policies<\/strong>&nbsp;&#8211; the entry is removed from the system. In this case, the key exists and may or may not have value(s). This depends on whether the key has multiple values and how many you set for the key. See the example in Deleting an Entire Policy.<\/li>\n\n\n\n<li>For keys in anything&nbsp;<strong>other than Software\\Policies<\/strong>&nbsp;&#8211; the modified row remains in the system\u2019s registry as it was set in the policy.\n<ul>\n<li>If you\u2019d like to reset the values, you need to do it manually. Either re-apply the policy with the original values for the key or edit the values in the Registry Editor.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"registry-key-examples\">Registry Key Examples<\/h2>\n\n\n\n<p>If you don\u2019t have policies in place yet, you can use the following examples to see how some commonly used registry keys are set. For complete details on using a registry key, see the documentation linked in the key\u2019s description.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Chrome Registry Keys<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Extension management settings<\/h4>\n\n\n\n<p>This key maps an extension ID or an update URL to its configuration<\/p>\n\n\n\n<ul>\n<li>A default configuration can be set for the special ID &#8220;*&#8221;, which will apply to all extensions that don&#8217;t have a custom configuration set.<\/li>\n\n\n\n<li>Forced installation is limited to apps and extensions listed in the Chrome Web Store.<\/li>\n<\/ul>\n\n\n\n<p>For details on schema and more, see Google\u2019s Chrome Enterprise Resource documentation on&nbsp;<a target=\"_blank\" href=\"https:\/\/cloud.google.com\/docs\/chrome-enterprise\/policies\/?policy=ExtensionSettings\" rel=\"noreferrer noopener\">Extension Settings<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>&nbsp;&nbsp;<strong>Registry Key Location<\/strong><\/td><td>&nbsp; Software\\Policies\\Google\\Chrome\\ExtensionSettings<\/td><\/tr><tr><td><strong>&nbsp;&nbsp;Value Name<\/strong><\/td><td>&nbsp;&nbsp;ExtensionSettings<\/td><\/tr><tr><td>&nbsp;<strong>&nbsp;Type<\/strong><\/td><td>&nbsp; SZ (text string)<\/td><\/tr><tr><td>&nbsp;<strong>&nbsp;Data<\/strong><\/td><td>&nbsp;&nbsp;Examples in Extension Settings documentation<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">Block External Extensions<\/h4>\n\n\n\n<p>Enabling this setting blocks external extensions from being installed and disabling this setting or leaving it unset allows external extensions to be installed.<\/p>\n\n\n\n<ul>\n<li>External extensions and their installation are documented in Chrome\u2019s Developer documentation on&nbsp;<a href=\"https:\/\/developer.chrome.com\/docs\/extensions\/how-to\/distribute\/install-extensions\" target=\"_blank\" rel=\"noreferrer noopener\">external extensions<\/a>.<\/li>\n<\/ul>\n\n\n\n<p>For details on schema and more, see Google\u2019s Chrome Enterprise Resource documentation on&nbsp;<a target=\"_blank\" href=\"https:\/\/cloud.google.com\/docs\/chrome-enterprise\/policies\/?policy=BlockExternalExtensions\" rel=\"noreferrer noopener\">Block\u200bExternal\u200bExtensions<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>&nbsp;&nbsp;<strong>Registry Key Location<\/strong><\/td><td>&nbsp; Software\\Policies\\Google\\Chrome\\BlockExternalExtensions<\/td><\/tr><tr><td><strong>&nbsp;&nbsp;Value Name<\/strong><\/td><td>&nbsp; BlockExternalExtensions<\/td><\/tr><tr><td>&nbsp;<strong>&nbsp;Type<\/strong><\/td><td>&nbsp; DWORD<\/td><\/tr><tr><td><strong>&nbsp; Data<\/strong><\/td><td>&nbsp;&nbsp;0x00000001 (1)<br>&nbsp;&nbsp;In this example, \u201c1\u201d means disabled<br>&nbsp;&nbsp;and the user can\u2019t install external extensions to their Chrome browser<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Windows Registry Keys<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Disable Automatic Restart Sign On <\/h4>\n\n\n\n<p>This key controls whether the user is automatically signed in and the session is automatically locked with all lock screen apps configured for that user when the device starts\u200b.<\/p>\n\n\n\n<ul>\n<li>This only occurs if the last interactive user didn\u2019t sign out before the restart or shutdown.\u200b<\/li>\n\n\n\n<li>This policy is only applicable to Windows Update restarts. If you don\u2019t configure this policy setting, it\u2019s enabled by default.<\/li>\n<\/ul>\n\n\n\n<p>For complete details on settings, see the Group Policy Search website documentation on&nbsp;<a target=\"_blank\" href=\"https:\/\/gpsearch.azurewebsites.net\/#10804\" rel=\"noreferrer noopener\">DisableAutomaticRestartSignOn<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>&nbsp;&nbsp;<strong>Registry Key Location<\/strong><\/td><td>&nbsp;&nbsp;Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System<\/td><\/tr><tr><td><strong>&nbsp;&nbsp;Value Name<\/strong><\/td><td>&nbsp;&nbsp;DisableAutomaticRestartSignOn<\/td><\/tr><tr><td>&nbsp;<strong>&nbsp;Type<\/strong><\/td><td>&nbsp; DWORD<\/td><\/tr><tr><td><strong>&nbsp; Data<\/strong><\/td><td>&nbsp;&nbsp;1<br>&nbsp;&nbsp;In this example, \u201c1\u201d means disabled<br>&nbsp;&nbsp;and the device won\u2019t sign in and lock the last interactive user<br>&nbsp;&nbsp;automatically after a restart.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-display-all-local-users-on-the-login-window\">Display All Local Users on the Login Window<\/h4>\n\n\n\n<p>This policy setting will display all local user accounts on the Windows login screen. See <a href=\"https:\/\/admx.help\/?Category=Windows_10_2016&amp;Policy=Microsoft.Policies.WindowsLogon::EnumerateLocalUsers\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">ADMX: Enumerate local users on domain-joined computers<\/a> to learn more. <\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>&nbsp;&nbsp;<strong>Registry Key Location<\/strong><\/td><td> Software\\Policies\\Microsoft\\Windows\\System<\/td><\/tr><tr><td><strong>&nbsp;&nbsp;Value Name<\/strong><\/td><td> EnumerateLocalUsers<\/td><\/tr><tr><td>&nbsp;<strong>&nbsp;Type<\/strong><\/td><td>&nbsp;DWORD<\/td><\/tr><tr><td><strong>&nbsp; Data<\/strong><\/td><td>  1<br>&nbsp; In this example, \u201c1\u201d means enabled<br>&nbsp;&nbsp;and the device will enumerate all local users on the login window. <\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>If your team needs a&nbsp;Windows policy&nbsp;that isn&#8217;t currently available in JumpCloud, you can use the JumpCloud&nbsp;Advanced: Custom Registry Keys Policy&nbsp;to [&hellip;]<\/p>\n","protected":false},"author":203,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2852,2862,2924],"support_tag":[],"coauthors":[2837,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Create Your Own Windows Policy Using Registry Keys - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to leverage JumpCloud to define custom Windows registry key policies to assist in better managing Windows devices. Explore configurations, troubleshooting, and example policies.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Create Your Own Windows Policy Using Registry Keys\" \/>\n<meta property=\"og:description\" content=\"Learn how to leverage JumpCloud to define custom Windows registry key policies to assist in better managing Windows devices. Explore configurations, troubleshooting, and example policies.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-16T21:23:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"14 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"derekpietras, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys\",\"url\":\"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys\",\"name\":\"Create Your Own Windows Policy Using Registry Keys - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:14+00:00\",\"dateModified\":\"2024-10-16T21:23:16+00:00\",\"description\":\"Learn how to leverage JumpCloud to define custom Windows registry key policies to assist in better managing Windows devices. Explore configurations, troubleshooting, and example policies.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Create Your Own Windows Policy Using Registry Keys\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Create Your Own Windows Policy Using Registry Keys - JumpCloud","description":"Learn how to leverage JumpCloud to define custom Windows registry key policies to assist in better managing Windows devices. Explore configurations, troubleshooting, and example policies.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys","og_locale":"en_US","og_type":"article","og_title":"Create Your Own Windows Policy Using Registry Keys","og_description":"Learn how to leverage JumpCloud to define custom Windows registry key policies to assist in better managing Windows devices. Explore configurations, troubleshooting, and example policies.","og_url":"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys","og_site_name":"JumpCloud","article_modified_time":"2024-10-16T21:23:16+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"14 minutes","Written by":"derekpietras, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys","url":"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys","name":"Create Your Own Windows Policy Using Registry Keys - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:14+00:00","dateModified":"2024-10-16T21:23:16+00:00","description":"Learn how to leverage JumpCloud to define custom Windows registry key policies to assist in better managing Windows devices. Explore configurations, troubleshooting, and example policies.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/create-your-own-windows-policy-using-registry-keys#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Create Your Own Windows Policy Using Registry Keys"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74849"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/203"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74849\/revisions"}],"predecessor-version":[{"id":116496,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74849\/revisions\/116496"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=74849"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=74849"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=74849"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=74849"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}