Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Server 2008 R2 Standard - Custom ADMX File

Posted on 2012-08-18
4
Medium Priority
?
1,229 Views
Last Modified: 2013-08-12
Hello, in Server 2008 R2 Standard, Microsoft has included again the standard list of drive restrictions that you can see by going into Group Policy Management, User, Policies, Admin Templates, Windows Components, Windows Explorer.  When we had Server 2003 Standard, I easily found the template files and modified the system.adm file to include the custom options in the drop-down list so I could hide drives I wanted hidden/show drives I wanted seen.  Here is a snippet from what I had before from the system.adm file:

            POLICY !!NoDrives
                  #if version >= 4
                  SUPPORTED !!SUPPORTED_Win2k
                  #endif

                  EXPLAIN !!NoDrives_Help
                  PART !!NoDrivesDropdown      DROPDOWNLIST NOSORT REQUIRED
                        VALUENAME "NoDrives"
                        ITEMLIST
                              NAME !!ABOnly           VALUE NUMERIC      3
                              NAME !!COnly            VALUE NUMERIC      4
                              NAME !!DOnly            VALUE NUMERIC       8
                              NAME !!ABConly          VALUE NUMERIC       7
                              NAME !!ABCDOnly         VALUE NUMERIC      15
                              NAME !!ALLDrives        VALUE NUMERIC      67108863 DEFAULT
                              ; low 26 bits on (1 bit per drive)
                              NAME !!RestNoDrives     VALUE NUMERIC      0
                              NAME !!AEHIOnly            VALUE NUMERIC      67108462
                              NAME !!AEFHIOnly            VALUE NUMERIC      67108430
                        END ITEMLIST
                  END PART
            END POLICY

            POLICY !!NoViewOnDrive
                  #if version >= 4
                  SUPPORTED !!SUPPORTED_Win2k
                  #endif

                  EXPLAIN !!NoViewOnDrive_Help
                  PART !!NoDrivesDropdown      DROPDOWNLIST NOSORT REQUIRED
                        VALUENAME "NoViewOnDrive"
                        ITEMLIST
                              NAME !!ABOnly           VALUE NUMERIC      3
                              NAME !!COnly            VALUE NUMERIC      4
                              NAME !!DOnly            VALUE NUMERIC       8
                              NAME !!ABConly          VALUE NUMERIC       7
                              NAME !!ABCDOnly         VALUE NUMERIC      15
                              NAME !!ALLDrives        VALUE NUMERIC      67108863 DEFAULT
                              ; low 26 bits on (1 bit per drive)
                              NAME !!RestNoDrives     VALUE NUMERIC      0
                              NAME !!AEHIOnly            VALUE NUMERIC      67108462
                              NAME !!AEFHIOnly            VALUE NUMERIC      67108430
                        END ITEMLIST
                  END PART
            END POLICY

At the bottom was the following in the [strings] section:
AEFHIOnly="Show A, E, F, H and I drives only"
AEHIOnly="Show A, E, H and I drives only"

I've looked and read and cannot find the files that I need to modify or custom create to get those options back in.

Where do I look or can someone provide me the file(s) I would need to add those two options in?

Thanks
0
Comment
Question by:theposse
  • 3
4 Comments
 
LVL 52

Accepted Solution

by:
Manpreet SIngh Khatra earned 2000 total points
ID: 38308827
Managing Group Policy ADMX Files Step-by-Step Guide
http://msdn.microsoft.com/en-us/library/bb530196.aspx

Unlike ADM files, ADMX files are not stored in individual GPOs by default; however, this behavior is supported for less common scenarios. For domain-based enterprises, administrators can create a central store location of ADMX files accessible by anyone with permission to create or edit GPOs. Group Policy tools will continue to recognize other earlier ADM files you have in your existing environment. Specifically, any custom ADM files will be consumed by Group Policy tools. (The tools will exclude ADM files that were included by default in the operating system, such as System.adm and Inetres.adm, because the ADMX files supersede these files.) The Group Policy Object Editor automatically reads and displays Administrative Template policy settings from both the ADMX and ADM files.

- Rancy
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38308907
Scenario 2: Editing Domain-Based GPOs Using ADMX Files
http://technet.microsoft.com/en-us/library/cc748955%28v=WS.10%29.aspx
0
 

Author Comment

by:theposse
ID: 38326465
Rancy, can I use a Windows 7 Pro machine for the administrative computer or does it have to be Vista?
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38328640
I guess so GPO is accessible by both but cant say as i havent tried it very specifically.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question