Link to home
Start Free TrialLog in
Avatar of DannyIce
DannyIce

asked on

Create an ADM from Registry Key

I am trying to get the following policys made into an ADM to deploy across the network. Ive read the article on Microsofts website but as usual the knowledge base isnt helpful enough. Please can you help? the keys are:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"RunOnceComplete"=dword:00000001
"RunOnceHasShown"=dword:00000001

Secondly I came across an article with the program called PolicyMaker Registry Extension 2.0 - this apparently makes ADM's from registry keys however, another article says that microsoft tooks the rights for it and now i cannot find a download for it. does anyone know any details on this?
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Download regtoadm from here: http://yizhar.mvps.org/
it's part of the NUTS package.
the other option is if you have a Windows 2008 server or Vista machine you can use group policy preferences. have a look here: http://technet.microsoft.com/en-gb/library/cc731892(WS.10).aspx
Avatar of oBdA
oBdA

Save below as "RunOnce.adm" or whatever.adm; note that you need to change the Filter view and uncheck "Only show policies that can be fully managed" to be able to see and configure these policies.
CLASS USER
 
CATEGORY "Additional Settings"
 
  CATEGORY "Internet Explorer"
    KEYNAME "Software\Microsoft\Internet Explorer\Main"
 
    POLICY "Run once complete"
      VALUENAME "RunOnceComplete"
      VALUEON NUMERIC 1
      VALUEOFF NUMERIC 0
    END POLICY
 
    POLICY "Run once has shown"
      VALUENAME "RunOnceHasShown"
      VALUEON NUMERIC 1
      VALUEOFF NUMERIC 0
    END POLICY
 
  END CATEGORY
 
END CATEGORY

Open in new window

Avatar of DannyIce

ASKER

OvDA - thanks for the response. everytime I add your ADM to my group policy i get an error message.

the following error occured in "filename.adm" on line 24: error 51 unexpected keyword

FOUND : CATEGORE
EXPECTED: CATEGORY

The file cannot be loaded.
Please click the "Select all" button below the code snippet box, hit Ctrl-C, open an empty notepad document, hit Ctrl-V, save the file.
You have additional lines after the ones I posted above; there should be only 22 lines, and my code doesn't contain "CATEGORE" anywhere.
Strange one. Thats what i thought.. The problem was the 2 sets of categorys. I removed the first category so the policys would show under > Users > Administrative Templates > Internet Explorer and this worked. Ive applied the policy to my test OU and then logged on a computer and these policys didnt add to the registry.

Its beginning to be a pain this. I couldnt even apply these registry keys by a logon script either. I know its not permissions based as I can go on the users account and run the .reg file i have created.

What can you suggest?
demazter - Thanks also for your reply's. I have downoaded the app you suggested and put the keys into it. Unfortunately this also throws errors and fails.
In the policy, set the two settings back to "Not configured" (do NOT change/remove an adm file while policies in this template are configured!).
Then edit the adm file, add an "\Acme" after "Software" in the line strating with "KEYNAME":
KEYNAME "Software\Acme\Microsoft\Internet Explorer\Main"
Reload the adm file into the GPO, and enable the two policies again.
Run
gpupdate /target:user /force
with the test user, and check whether the two keys are created in Software\Acme\Microsoft\Internet Explorer\Main.
yes they created under acme but why not under the original place?
ASKER CERTIFIED SOLUTION
Avatar of oBdA
oBdA

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
After i posted my message earlier, I changed the GPO back to the original registry location and it worked. Then it stopped again. I think I have figured out that its something to do with replication. I think I was authenticating against the second DC which didnt pick it up the change straight away.

Ill post again if it stops working but thanks for your help.

You dont happen to know how to set IE 7 and 8 Search to google in the registry do you? and again add this to the ADM?

Microsoft knows how to do it:
How to create custom .adm or .admx files to add search providers to the toolbar search box in Internet Explorer 7
http://support.microsoft.com/kb/918238

Neither IE7 nor Opera are currently able to display the first adm listing; you'll find the version extracted from the source in the box below.
Note that the template still requires manual editing, you can't use it out of the box.
CLASS USER
CATEGORY !!WindowsComponents
CATEGORY !!InternetExplorer
 
POLICY !!PopulateSearchProviderList
			#if version >= 4
			SUPPORTED !!SUPPORTED_IE7
			#endif
			EXPLAIN !!IE_Explain_PopulateSearchProviderList
			KEYNAME "Software\Policies\Microsoft\Internet Explorer\SearchScopes"
			VALUENAME Version
			VALUEON NUMERIC <VERSION>
   ACTIONLISTON
KEYNAME "Software\Policies\Microsoft\Internet Explorer\SearchScopes"
			     	 VALUENAME DefaultScope	VALUE "<DEFAULTSUBKEY>"
 
				KEYNAME "Software\Policies\Microsoft\Internet Explorer\SearchScopes\<SUBKEY1>"
				VALUENAME DisplayName  VALUE "<NAME1>"	
				VALUENAME URL               VALUE "<URL1>"
			END ACTIONLISTON
		END POLICY
END CATEGORY
END CATEGORY
 
CLASS MACHINE
CATEGORY !!WindowsComponents
CATEGORY !!InternetExplorer
<POLICY ... END POLICY Insert the same policy that is under class user>
   END CATEGORY
END CATEGORY
 
 
[strings]
SUPPORTED_IE7="At least Internet Explorer 7.0"
WindowsComponents="Windows Components"
InternetExplorer="Internet Explorer"
PopulateSearchProviderList="Populate List of search providers"
IE_Explain_PopulateSearchProviderList="This policy setting will let you populate a list of search providers that will be displayed in the Internet Explorer search box.\n\n If you enable this policy setting and if the "Restrict search providers to a specific list of search providers" Group Policy setting is enabled, this list will be the only list that appears in the Internet Explorer drop-down list. If the "Add a specific list of search providers to the user's search provider list" Group Policy setting is enabled, this list will be added to the user's list of search providers.\n\n If you disable this policy setting or do not configure it, users will have complete freedom to create their own search provider list."

Open in new window

very helpful. thank you