Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 276
  • Last Modified:

upgrading xp sp1 to sp2 in a win2k domain do io need to update the .adm files on the DC?

hello,

im manually service packing some xp sp1 pcs to sp2. Do i need to change anything in AD GP after? do i need to load a .adm file to give me the extra functionality?

please advise your thoughts, and problem potentially encountered

0
acetate
Asked:
acetate
1 Solution
 
Pete LongConsultantCommented:
Add Windows XP Templates for Group Policy

OPTION 1

Windows XP contains the following updated administrative template files:

    * System.adm. Used for core settings.
    * Wmplayer.adm. Used for Windows Media settings.
    * Conf.adm. Used for NetMeetingĀ® conferencing software.
    * Inetres.adm. Used for Internet Explorer.

To upgrade .adm files:

   1. Locate the desired .adm files on a Windows XP machine. (These are located in the Windows/INF directory.)
   2. Copy system.adm and any other .adm files to a file share.
   3. Go to the Windows 2000 Server-based computer and open a GPO in the Group Policy snap-in.
   4. Right click Administrative templates and select Add/Remove Templates as shown in Figure 2 below.

Add/Remove Templates

   5. When the Add/Remove Templates dialog box appears, remove the Windows 2000-based .adm files and add the Windows XP-based .adm files.
   6. Repeat for each GPO.

OPTION 2

To upgrade a Windows 2000 GPO, follow these steps on a Windows XP-based domain member:  
1.      Click Start, click Run, type mmc, and then click OK.
2.      On the File menu, click Add/Remove Snap-in.
3.      In the Add/Remove Snap-in dialog box, click Add.
4.      In the Add Standalone Snap-in dialog box, click Group Policy, and then click Add.
5.      In the Select Group Policy Object dialog box, Local Computer appears as the target object. Click Browse, select the GPO that you want to upgrade, and then click OK. Note that when you click Browse, a delay might occur while Windows searches for the policy objects in the domain.
6.      Click Close. Click OK.
You can now adjust the policy settings in this Policy object by using the Group Policy console from the Windows XP-based client.
The GPO is actually updated with the new administrative template (.adm) files when you click or expand Computer Configuration or User Configuration under the title of the Policy object. You can upgrade a single Policy object at a time by using this method.
Note: The Windows XP Group Policy snap-in works only in Windows XP Professional.
The Windows XP Group Policy snap-in implements a new feature that displays the operating system version that is required by an Administrative Template policy setting in the side pane in Extended view. The Windows 2000 Group Policy snap-in cannot display this version information, but can be used to modify the administrative template settings after being upgraded.
New Security settings are also supported in Windows XP. These are available by using the Windows XP Group Policy snap-in; they are not displayed by using the Windows 2000 Group Policy snap-in whether or not they are configured. Editing Security Microsoft recommends that you edit upgraded GPOs from Windows XP-based clients. You can perform subsequent management of these GPOs (such as linking them to domains or organizational units) from the Windows 2000 Active Directory management tools.


References
http://www.jsifaq.com/SUBJ/tip4600/rh4649.htm
http://support.microsoft.com/?kbid=307900
http://www.petri.co.il/upgrade_windows_2000_gpo_with_xp_features.htm

Downloads
http://www.microsoft.com/downloads/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en
0
 
acetateAuthor Commented:
hello,

do i have to upgrade the GPO on the win2k domain controller? im not fussed about the clients

0
 
jeroenlemaireCommented:
you don't need to change anything.
The AD behaviour remains the same, that's how i experienced it.
If i were you, i wouldn't worry...

Anything you set on a policy in your AD will affect the PC or user no matter if he's running an XP SP1 or SP2, cuz Win2K server isn't aware of the SP2 yet... only Win2K3 is aware of that

Hope this helps you out.

J
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
acetateAuthor Commented:
ah, i see, i thought i needed to load an additional .adm file into my DC to take advantage of xp sp2 addittional features

how do i centrally control the xp sp2 firewall then??
0
 
jeroenlemaireCommented:
through win2k not possible as xp sp2 actually contains portions of win2k3
0
 
harleyjdCommented:
Adding the extra adm will only add it for the group policy you add it to.

While anything you add will be set on an SP1 machine, it won't have any effect if the services (firewall, security centre) doesn't exist.

to quote petelong:

"The GPO is actually updated with the new administrative template (.adm) files when you click or expand Computer Configuration or User Configuration under the title of the Policy object. You can upgrade a single Policy object at a time by using this method."

0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now