[gptalk] Re: Group Policy and Zenworks

  • From: "Alan & Margaret" <syspro@xxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 5 Nov 2008 09:30:24 +1100

Hi Darren,

 

It looks like they have just lifted the Sysvol structure from Microsoft..
They build a common directory (e.g.
<file:///\\Central\ZENAPPS1\Win32apps\policies>
\\Central\ZENAPPS1\Win32apps\policies) then create a subdirectory for each
GPO, then create a directory structure like:-

 

AdminLecWinXPSP2\gpt.ini

AdminLecWinXPSP2\Adm\admfiles.ini

AdminLecWinXPSP2\Adm\conf.adm

AdminLecWinXPSP2\Adm\HKCUUserShellFolders.adm

AdminLecWinXPSP2\Adm\inetres.adm

AdminLecWinXPSP2\Adm\system.adm

AdminLecWinXPSP2\Adm\wmplayer.adm

AdminLecWinXPSP2\Adm\wuau.adm

AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\IPS1.dat
AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\XPSec.dat
AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\ZenOSver.inf
AdminLecWinXPSP2\User\Registry.pol

AdminLecWinXPSP2\User\MICROSOFT\IEAK\install.ins

AdminLecWinXPSP2\User\MICROSOFT\IEAK\BRANDING\ZONES\seczones.inf
AdminLecWinXPSP2\User\MICROSOFT\IEAK\BRANDING\ZONES\seczrsop.inf

 

where AdminLecWinXPSP2 is the GPO name. Look familiar?

 

It sounds like they know about OU's as well..

 

I am guessing that they leverage of the Microsoft CSE processing somehow for
instance, running the ADM Template engine but pointing it at 

\\Central\ZENAPPS1\Win32apps\policies\AdminLecWinXPSP2\User\Registry.pol
<file:///\\Central\ZENAPPS1\Win32apps\policies\AdminLecWinXPSP2\User\Registr
y.pol> .

 

I did find a post on the web that suggested they don't have GPMC. Instead
they copy the files down to the local machine, run GPEDIT, then copy it back
to the central location... 

 

Alan Cuthbertson

 

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, 5 November 2008 9:02 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Group Policy and Zenworks

 

Alan-

I've never seen anything like this and I would be highly surprised if you
were able to find such documentation (except perhaps in the bowels of
Novell). So, I know next to nothing about Zenworks but are you saying that
it can actually store GPOs that are straight from an AD environment, without
AD being present?

 

Darren

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Alan & Margaret
Sent: Tuesday, November 04, 2008 1:29 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Group Policy and Zenworks

 

Hi,

 

I realise that it may be heresy to submit this query to a Microsoft Group
Policy list, but here goes anyway.

 

I had a query from a potential customer as to whether my software would
report on Group Policies on Zenworks. He sent me a list of the directory
structure which Zenworks uses to store Group Policy and it looks the same.
It would seem likely that the Novell AD equivalent would hold the AD
equivalent info about each GPO and the Links to of the GPO to each OU.

 

What I am looking for is a contact or web site that details the comparisons
between ZenWorks' implementation and Microsoft's implementation of Group
Policy, especially the equivalent AD calls.

 

Alan Cuthbertson     

Other related posts: