Link to home
Start Free TrialLog in
Avatar of Porffor
PorfforFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Understanding Group Policy ADMX files

I have just embraced the world of ADMX, having used Group Policy with ADM files for years and being comfortable with it.

So, I created a "PolicyDefinitions" folder in \\(dc)\sysvol\(domain)\Policies\

I added the ADMX files (for Office 2010 as it happens) into this folder, and added the ADML files to a folder called 'en-us' within.

I noticed the change immediately in GPMC, i.e. now, inside a policy editor, it says:

"Administrator Templates: Policy definitions (ADMX files) retrieved from the central store."

Which is good - but underneath it there is nothing more than what is in the ADMX files, i.e. the usual builtin settings (such as Control Panel, Network, Printers, System, Windows Components) no longer show!

Do you know why?

I have had to remove the PolicyDefiniteions folder from Sysvol for now - I'm too worried it's gonna screw up my old ADM policies.

Is a GPO able to look for and use both the ADM files from it own folder and also the ADMX files in the central store, at the same time?  If not, what extra do I need to put in the sysvol PolicyDefinitions folder to make the old ADM option appear again in gpedit?

Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Lester_Clayton
Lester_Clayton

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Run5k
Run5k
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Porffor

ASKER

Thanks for your info.

In the Managing Group Policy link there was a guy who had the same query as me.  It said there that I should also download ADMX files for Windows 7 and Windows 2008 R2 (msi file).  My first question is what to do with the MSI file.  I don't particularly want to run the installer on a domain controller.  Can I just use 7-zip to get at the files within and just drop them in the PolicyDefinitions.

Secondly, what about controlling WinXP?  Will the ADMX files for Win7 work for WinXP if the XP machines have GP client-side extension installed?

Lastly, our domain is still controlled by Server 2003 - but we have Server 2008 servers and Windows 7/XP desktops.  Will I be able to fully control ADMX functionality from a Server 2003 machine - should I want to some day,  Or will I have to do it from a Windows 7/2008 machine?

Thanks.
Avatar of Porffor

ASKER

Right, I've just tried to unpack the MSI file and it doesn't work as I expected - it just extracts loads of fuiles without extension
Avatar of Porffor

ASKER

I have now run the MSI on a local Win7 PC, found tha ADMX files in Program Files, and then copied them up to Sysvol.  It looks OK - I get more items in the GP editor now.  But, if I can just get answers to the rest of my questions above then I'll be happy.

Thanks.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial