• Create Registry.reg file with required registry changes. E.g. following will disable "Download Windows Search" prompt in MS Outlook 2010:
  Windows Registry Editor Version 5.00
  [HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Search]
  "DisableDownloadSearchPrompt"=dword:00000001
  

• Create Registry.bat file with text:
  %systemroot%\regedit /s Registry.reg
  

• Open Group Policy object, go to User Configuration > Windows Settings > Scripts > Logon
• Click on Show Files (this opens a folder in \\domain-name\SysVol\domain-name\Policies\... ) and copy both files you created to that folder.
  
  
• Click on Add and select Registry.bat
• Deploy Group Policy object where required.
  

Windows Server 2003
Windows XP

Normally to update / unlock user's cached domain credentials on a workstation you need to log on as the user while connected to the domain controller (locally or via VPN). If you have a remote workstation which connects remotely via VPN you are fine as long as VPN  is initiated on a router / firewall or your software VPN clients initiates before user logs on.
However, if your VPN software only works while user is logged on you won't be able to update cached credentials normal way.

You can get it done using remote desktop connection:
Logon on a workstation using cached credentials. You can use any other domain or local account, not necessary one you are trying to update.
Once you are logged on start your VPN client and ensure you have connection to your domain controller.
From the office network side start remote desktop client and connect to the remote workstation (via VPN).
When asked for login details enter username and password of the user you are trying to update.
This will update cashed domain credentials on the remote workstation.


Windows XP
Windows Server 2003

1. Go to Distribute Adobe Flash Player page and apply for a free Flash Player distribution licesnse.
2. Once you received confirmation email click on a provided link and download latest .msi installer. ActiveX - for Internet Explorer. Plugin - for all other browsers.
3. Deploy through Group Policy.

To disable Adobe Flash Auto Update Notifications read this article.

• Obtain a license to distribute Adobe Reader:
  • Go to Adobe Reader download page http://get.adobe.com/uk/reader/ and click on "Distribute Adobe Reader".
  • Fill the form and wait for the confirmation email. This gives you permission to distribute Adobe Reader.
• Obtain Adobe Reader .msi file:
  • Download the latest .msi file from Adobe FTP server ftp://ftp.adobe.com/pub/adobe/reader or .exe file from here: https://get.adobe.com/uk/reader/enterprise/
    If you downloaded .exe file, extract .msi from it using 7-ZIP or
    Run the .exe file from the command prompt with -nos_ne switch. This will extract .msi and other files but won't start installation.
    Move extracted files to your desktop. Check the following locations:
    C:\Documents and Settings\\Local Settings\Application Data\Adobe (Windows XP)
    C:\Documents and Settings\All Users\Application Data\Adobe\Setup (Windows XP)
    C:\ProgramData\Adobe\Setup (Windows Vista / 7)

• Customize installation (optional):
  • Download and install free Adobe Customization Wizard:
    • Adobe Customization Wizard 9
    • Adobe Customization Wizard 10 (X) 
    • Adobe Customization Wizard 11 (XI)
    • Adobe Customization Wizard DC (also works for Adobe Reader 2017)
    • Or any other required version available directly from Adobe.
  • Adobe Customization Wizard > Open Package > select your .msi file.
  • Customise installation settings as required.
  • File > Save Package. This creates Microsoft Transform (.mst) file in the same folder.
• Deploy .msi using group policy.
  If you want to use transformation (.mst) file created in step 3 select Advanced deployment method and add .mst file to the Modifications list.

Windows XP
Windows 7
Adobe Reader 9
Adobe Reader 10 (X)
Adobe Reader 11 (XI)
Adobe Reader DC
Adobe Reader 2017