DannyIce
asked on
Create an ADM from Registry Key
I am trying to get the following policys made into an ADM to deploy across the network. Ive read the article on Microsofts website but as usual the knowledge base isnt helpful enough. Please can you help? the keys are:
[HKEY_CURRENT_USER\Softwar e\Microsof t\Internet Explorer\Main]
"RunOnceComplete"=dword:00 000001
"RunOnceHasShown"=dword:00 000001
Secondly I came across an article with the program called PolicyMaker Registry Extension 2.0 - this apparently makes ADM's from registry keys however, another article says that microsoft tooks the rights for it and now i cannot find a download for it. does anyone know any details on this?
[HKEY_CURRENT_USER\Softwar
"RunOnceComplete"=dword:00
"RunOnceHasShown"=dword:00
Secondly I came across an article with the program called PolicyMaker Registry Extension 2.0 - this apparently makes ADM's from registry keys however, another article says that microsoft tooks the rights for it and now i cannot find a download for it. does anyone know any details on this?
the other option is if you have a Windows 2008 server or Vista machine you can use group policy preferences. have a look here: http://technet.microsoft.com/en-gb/library/cc731892(WS.10).aspx
Save below as "RunOnce.adm" or whatever.adm; note that you need to change the Filter view and uncheck "Only show policies that can be fully managed" to be able to see and configure these policies.
CLASS USER
CATEGORY "Additional Settings"
CATEGORY "Internet Explorer"
KEYNAME "Software\Microsoft\Internet Explorer\Main"
POLICY "Run once complete"
VALUENAME "RunOnceComplete"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY "Run once has shown"
VALUENAME "RunOnceHasShown"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
END CATEGORY
ASKER
OvDA - thanks for the response. everytime I add your ADM to my group policy i get an error message.
the following error occured in "filename.adm" on line 24: error 51 unexpected keyword
FOUND : CATEGORE
EXPECTED: CATEGORY
The file cannot be loaded.
the following error occured in "filename.adm" on line 24: error 51 unexpected keyword
FOUND : CATEGORE
EXPECTED: CATEGORY
The file cannot be loaded.
Please click the "Select all" button below the code snippet box, hit Ctrl-C, open an empty notepad document, hit Ctrl-V, save the file.
You have additional lines after the ones I posted above; there should be only 22 lines, and my code doesn't contain "CATEGORE" anywhere.
You have additional lines after the ones I posted above; there should be only 22 lines, and my code doesn't contain "CATEGORE" anywhere.
ASKER
Strange one. Thats what i thought.. The problem was the 2 sets of categorys. I removed the first category so the policys would show under > Users > Administrative Templates > Internet Explorer and this worked. Ive applied the policy to my test OU and then logged on a computer and these policys didnt add to the registry.
Its beginning to be a pain this. I couldnt even apply these registry keys by a logon script either. I know its not permissions based as I can go on the users account and run the .reg file i have created.
What can you suggest?
Its beginning to be a pain this. I couldnt even apply these registry keys by a logon script either. I know its not permissions based as I can go on the users account and run the .reg file i have created.
What can you suggest?
ASKER
demazter - Thanks also for your reply's. I have downoaded the app you suggested and put the keys into it. Unfortunately this also throws errors and fails.
In the policy, set the two settings back to "Not configured" (do NOT change/remove an adm file while policies in this template are configured!).
Then edit the adm file, add an "\Acme" after "Software" in the line strating with "KEYNAME":
KEYNAME "Software\Acme\Microsoft\I nternet Explorer\Main"
Reload the adm file into the GPO, and enable the two policies again.
Run
gpupdate /target:user /force
with the test user, and check whether the two keys are created in Software\Acme\Microsoft\In ternet Explorer\Main.
Then edit the adm file, add an "\Acme" after "Software" in the line strating with "KEYNAME":
KEYNAME "Software\Acme\Microsoft\I
Reload the adm file into the GPO, and enable the two policies again.
Run
gpupdate /target:user /force
with the test user, and check whether the two keys are created in Software\Acme\Microsoft\In
ASKER
yes they created under acme but why not under the original place?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
After i posted my message earlier, I changed the GPO back to the original registry location and it worked. Then it stopped again. I think I have figured out that its something to do with replication. I think I was authenticating against the second DC which didnt pick it up the change straight away.
Ill post again if it stops working but thanks for your help.
You dont happen to know how to set IE 7 and 8 Search to google in the registry do you? and again add this to the ADM?
Ill post again if it stops working but thanks for your help.
You dont happen to know how to set IE 7 and 8 Search to google in the registry do you? and again add this to the ADM?
Microsoft knows how to do it:
How to create custom .adm or .admx files to add search providers to the toolbar search box in Internet Explorer 7
http://support.microsoft.com/kb/918238
Neither IE7 nor Opera are currently able to display the first adm listing; you'll find the version extracted from the source in the box below.
Note that the template still requires manual editing, you can't use it out of the box.
How to create custom .adm or .admx files to add search providers to the toolbar search box in Internet Explorer 7
http://support.microsoft.com/kb/918238
Neither IE7 nor Opera are currently able to display the first adm listing; you'll find the version extracted from the source in the box below.
Note that the template still requires manual editing, you can't use it out of the box.
CLASS USER
CATEGORY !!WindowsComponents
CATEGORY !!InternetExplorer
POLICY !!PopulateSearchProviderList
#if version >= 4
SUPPORTED !!SUPPORTED_IE7
#endif
EXPLAIN !!IE_Explain_PopulateSearchProviderList
KEYNAME "Software\Policies\Microsoft\Internet Explorer\SearchScopes"
VALUENAME Version
VALUEON NUMERIC <VERSION>
ACTIONLISTON
KEYNAME "Software\Policies\Microsoft\Internet Explorer\SearchScopes"
VALUENAME DefaultScope VALUE "<DEFAULTSUBKEY>"
KEYNAME "Software\Policies\Microsoft\Internet Explorer\SearchScopes\<SUBKEY1>"
VALUENAME DisplayName VALUE "<NAME1>"
VALUENAME URL VALUE "<URL1>"
END ACTIONLISTON
END POLICY
END CATEGORY
END CATEGORY
CLASS MACHINE
CATEGORY !!WindowsComponents
CATEGORY !!InternetExplorer
<POLICY ... END POLICY Insert the same policy that is under class user>
END CATEGORY
END CATEGORY
[strings]
SUPPORTED_IE7="At least Internet Explorer 7.0"
WindowsComponents="Windows Components"
InternetExplorer="Internet Explorer"
PopulateSearchProviderList="Populate List of search providers"
IE_Explain_PopulateSearchProviderList="This policy setting will let you populate a list of search providers that will be displayed in the Internet Explorer search box.\n\n If you enable this policy setting and if the "Restrict search providers to a specific list of search providers" Group Policy setting is enabled, this list will be the only list that appears in the Internet Explorer drop-down list. If the "Add a specific list of search providers to the user's search provider list" Group Policy setting is enabled, this list will be added to the user's list of search providers.\n\n If you disable this policy setting or do not configure it, users will have complete freedom to create their own search provider list."
ASKER
very helpful. thank you
it's part of the NUTS package.