[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 850
  • Last Modified:

Group Policy: Question about ADMX files and Windows XP

Hi. I'm trying to organise an inherited GPO infrastucture that's a bit messy. I'm trying to get my head around how ADMX files work when applied to Windows XP.

Our organisation uses Server 2008 r2 but our client PC's run XP sp3. I know that in GPMC for 2008 I have to use the new ADMX files. I also am lead to believe that the ADMX files introduce hundreds more possible settings for Windows7/Vista clients and that ADMX file settings will propagate and work on XP clients.

Confusing bit: how will I know that a particular setting i'm making will affect the XP client or not?

I hope this makes sense.
0
NECC_Tech
Asked:
NECC_Tech
  • 3
  • 2
1 Solution
 
Krzysztof PytkoActive Directory EngineerCommented:
ADMX file is the new Administrative Template feature (new file format) for Windows 7 or 2008/2008R2 not for XP. This file contains settings (registry modifications) which are understand by GPO client which sets them up. When you have created GPO with administrative templates (from ADMX file) and applied to OU with Win XP computers then registry settings will be modified (if branch exists). ADMX is only new XML file structure but ADM is flat text file with predefined syntax.

However, you can still use the old ADM files on 2008 and import them to GPO

ADMX file pushed from GPO will affect your XP if it is applied to OU with XP computers and if settings to modify exists in Win XP registry

Regards,
Krzysztof
0
 
NECC_TechAuthor Commented:
Thanks. What I really trying to determine is 'how' I would be able to tell in GPMC if a specific setting would affect XP or 7 or both? You see i'm trying to design GPO policy to apply to both XP and 7 PC's in our organisation and before I start I'd like to know if there's a way to know if a setting is applicable.

Or is it that I should implement my GPO changes one at a time and test on both platforms as I go?
0
 
Krzysztof PytkoActive Directory EngineerCommented:
When you import your own Administrative Template then you will know what it modifies and which OSes are supported. Using build-in templates, yuo have description in each of them. There is information about which OS is required or which IE browser

Krzysztof
0
 
NECC_TechAuthor Commented:
Thanks.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
You're welcome :)
Remember! If you want to use your own Administrative Templates (ADMX) for 7/2008R2 you need to create central store for them. In other case ADMX files wouldn't be available from each DC (only from this on which were saved). How to create central store check this
http://technet.microsoft.com/en-us/library/cc709647%28WS.10%29.aspx

Krzysztof
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now