?
Solved

Understanding Group Policy ADMX files

Posted on 2011-09-15
7
Medium Priority
?
921 Views
Last Modified: 2012-05-12
I have just embraced the world of ADMX, having used Group Policy with ADM files for years and being comfortable with it.

So, I created a "PolicyDefinitions" folder in \\(dc)\sysvol\(domain)\Policies\

I added the ADMX files (for Office 2010 as it happens) into this folder, and added the ADML files to a folder called 'en-us' within.

I noticed the change immediately in GPMC, i.e. now, inside a policy editor, it says:

"Administrator Templates: Policy definitions (ADMX files) retrieved from the central store."

Which is good - but underneath it there is nothing more than what is in the ADMX files, i.e. the usual builtin settings (such as Control Panel, Network, Printers, System, Windows Components) no longer show!

Do you know why?

I have had to remove the PolicyDefiniteions folder from Sysvol for now - I'm too worried it's gonna screw up my old ADM policies.

Is a GPO able to look for and use both the ADM files from it own folder and also the ADMX files in the central store, at the same time?  If not, what extra do I need to put in the sysvol PolicyDefinitions folder to make the old ADM option appear again in gpedit?

Thanks.
0
Comment
Question by:meirionwyllt
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 9

Accepted Solution

by:
Lester_Clayton earned 500 total points
ID: 36542438
Yes, it's possible to mix and match ADM and ADMX files.  Windows 7 and Windows 2008 use ADMX files by default, and they are installed in the C:\Windows\PolicyDefinitions of servers and workstations.

GPMC (Group Policy Management Console) should automatically load all the ones available in both the Domain AND the local drive from where it is running.  If it does not, just check in C:\Windows\PolicyDefinitions that the files are there.

You can always copy these from your Windows 7 workstation to the central PolicyDefinitions too if you find this necessary.  Just remember to copy the corresponding language files (ADML).
0
 
LVL 28

Assisted Solution

by:Run5k
Run5k earned 1500 total points
ID: 36542472
Is should be working for you.  Here is the Microsoft article I used as a baseline when I first started working with ADMX files:

Managing Group Policy ADMX Files Step-by-Step Guide
0
 

Author Comment

by:meirionwyllt
ID: 36543037
Thanks for your info.

In the Managing Group Policy link there was a guy who had the same query as me.  It said there that I should also download ADMX files for Windows 7 and Windows 2008 R2 (msi file).  My first question is what to do with the MSI file.  I don't particularly want to run the installer on a domain controller.  Can I just use 7-zip to get at the files within and just drop them in the PolicyDefinitions.

Secondly, what about controlling WinXP?  Will the ADMX files for Win7 work for WinXP if the XP machines have GP client-side extension installed?

Lastly, our domain is still controlled by Server 2003 - but we have Server 2008 servers and Windows 7/XP desktops.  Will I be able to fully control ADMX functionality from a Server 2003 machine - should I want to some day,  Or will I have to do it from a Windows 7/2008 machine?

Thanks.
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 

Author Comment

by:meirionwyllt
ID: 36543058
Right, I've just tried to unpack the MSI file and it doesn't work as I expected - it just extracts loads of fuiles without extension
0
 

Author Comment

by:meirionwyllt
ID: 36543158
I have now run the MSI on a local Win7 PC, found tha ADMX files in Program Files, and then copied them up to Sysvol.  It looks OK - I get more items in the GP editor now.  But, if I can just get answers to the rest of my questions above then I'll be happy.

Thanks.
0
 
LVL 28

Assisted Solution

by:Run5k
Run5k earned 1500 total points
ID: 36543585
Personally, I prefer to install the Remote Server Administration Tools on my primary Windows 7 workstation.  Amongst other things, you can use it to work with utilities such as Active Directory Users and Computers and Group Policy Management Console from the comfort of your own desk.

http://support.microsoft.com/kb/958830/

http://www.microsoft.com/download/en/details.aspx?id=7887

Installing Remote Server Administration Tools (RSAT) for Windows 7
0
 
LVL 28

Assisted Solution

by:Run5k
Run5k earned 1500 total points
ID: 36543707
As for your question regarding WinXP machines, to the best of my knowledge you should still be fine managing them.  It has been a while since we had any XP machines in a mixed environment on our domain, but I'm sure that someone else within the EE community will jump in to confirm/deny.
0

Featured Post

Veeam Task Manager for Hyper-V

Task Manager for Hyper-V provides critical information that allows you to monitor Hyper-V performance by displaying real-time views of CPU and memory at the individual VM-level, so you can quickly identify which VMs are using host resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question