I would like to apply a machine GPP which Update the following registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE 0-3AEA-1069-A2D8-08002B30309D}\LocalizedString\@%SystemRoot%\system 32\SHELL32.dll,-9216

To

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE 0-3AEA-1069-A2D8-08002B30309D}\LocalizedString\%<UserName>% At %<ComputerName>%

When testing this policy, there is an error message in the event log of the test computer: 0x80070005 access denied

It appears that this registry key is owned by trustinstaller and system/administrator have only read access to this key.

I have bypassed this issue by taking ownership of the key and then applied full control rights to system/administrator account.

When I apply again the policy, it is okay (no error message) and the desktop icon shows the modified text (ie: “rparret At pcxxxx” instead of “computer”.

As the change of the owner and rights of registry key is complicated, Im looking for a nicer way to change value of protected registry keys without using a thirdparty programs.