asked on

Loading custom adm comes up blank

Long story short, I am trying to create a custom adm to allow me to restrict drive access and visibility to the "M" and "N" drives, which isn't supported in the normal systems.adm. I created a custom adm and added the necessary lines in order to allow an option in the drop down box to restrict access to M and N. Upon loading the adm file, I get no error, but the folder added to the tree on the left is blank, I have two settings on the right that are blank, and all text you would normally see under them is gone.

This is the first adm I am creating, so I may be missing something easy, but I don't know it. Here is the adm text.

      CATEGORY !!driverestrict
            #if version >= 4

            #endif

            KEYNAME "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"

            POLICY !!NoDrives
                  #if version >= 4
                  SUPPORTED !!SUPPORTED_Win2k
                  #endif

                  EXPLAIN !!NoDrives_Help
                  PART !!NoDrivesDropdown      DROPDOWNLIST NOSORT REQUIRED
                        VALUENAME "NoDrives"
                        ITEMLIST
                              NAME !!ABOnly VALUE NUMERIC      3
                              NAME !!COnly VALUE NUMERIC      4
                              NAME !!DOnly VALUE NUMERIC       8
                              NAME !!ABConly VALUE NUMERIC       7
                              NAME !!ABCDOnly VALUE NUMERIC      15
                              NAME !!ALLDrives VALUE NUMERIC      67108863 DEFAULT
                              ; low 26 bits on (1 bit per drive)
                              NAME !!RestNoDrives VALUE NUMERIC      0
                              NAME !!NMOnly       VALUE NUMERIC      3072
                        END ITEMLIST
                  END PART
            END POLICY

            POLICY !!NoViewOnDrive
                  #if version >= 4
                  SUPPORTED !!SUPPORTED_Win2k
                  #endif

                  EXPLAIN !!NoViewOnDrive_Help
                  PART !!NoDrivesDropdown      DROPDOWNLIST NOSORT REQUIRED
                        VALUENAME "NoViewOnDrive"
                        ITEMLIST
                              NAME !!ABOnly VALUE NUMERIC      3
                              NAME !!COnly VALUE NUMERIC      4
                              NAME !!DOnly VALUE NUMERIC       8
                              NAME !!ABConly VALUE NUMERIC       7
                              NAME !!ABCDOnly VALUE NUMERIC      15
                              NAME !!ALLDrives VALUE NUMERIC      67108863 DEFAULT
                              ; low 26 bits on (1 bit per drive)
                              NAME !!RestNoDrives VALUE NUMERIC      0
                              NAME !!NMOnly       VALUE NUMERIC      3072
                        END ITEMLIST
                  END PART
            END POLICY

      END CATEGORY ;; driverestrict

[strings]
ABCDOnly="Restrict A, B, C and D drives only"
ABConly="Restrict A, B and C drives only"
ABOnly="Restrict A and B drives only"
ALLDrives="Restrict all drives"
COnly="Restrict C drive only"
DOnly="Restrict D drive only"
RestNoDrives="Do not restrict drives"
NMOnly="Restrict M and N drives only"
drivesrestrict="Restrict Drives"
NoDrives="Restrict Drives"
supported_win2k="Supported by Win2k"
Nodrives_help="Help for No Drives"
NoDrivesDropdown="Pick one of the following combinations"
NoViewOnDrive_Help="No View Help"
NoViewOnDrive="Prevent access to drives from My Computer"
driverestrict="Restrict Drive Access"

HeinoSkov

Login to your group policy management and edit the GPO that you have added the above file to.

Rigthclick on Administrative Templates --> View --> Filtering

Then uncheck the box called: "Only show policy settings that can be fully managed"

This should show your policies...

Telstar-Networks

ASKER

That is not is, I am afraid. I checked that earlier, sorry I forgot to mention it, but it is still blank.

Telstar-Networks

ASKER

Figured it out, in case anyone else runs into this problem. If you remove systems.adm from the loaded list, it suddenly starts working. I'm not sure why, but it does.

Telstar-Networks

ASKER

Okay, kind of figured out. It is loading just fine, though it says it can't find descriptions. I am able to load up the settings correctly and the option is in the drop down. When I link it, however, and run gpresult or the wizard for RSoP, the policy isn't referenced at all, not in applied, nor denied. It also loads under the computer settings and I'm not sure why, as the copied portion was from User settings, although I didn't specify one or the other in the file, as you can see above.

oBdA

These are policies that can be fully managed.
What you're missing is the class of the settings; the "Hide Drives" policies are user settings, so that whole thing is of "CLASS USER" (unlike CATEGORY or POLICY, CLASS doesn't need to be closed):

CLASS USER
      CATEGORY !!driverestrict
            KEYNAME "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
            POLICY !!NoDrives
                  #if version >= 4
                  SUPPORTED !!SUPPORTED_Win2k
                  #endif
...

Open in new window

ASKER CERTIFIED SOLUTION

Telstar-Networks

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial