[gptalk] Re: Question on adding ADM Templates.

  • From: "Alan & Margaret" <Syspro@xxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Fri, 20 Oct 2006 09:32:35 +1000

Hi Dawn,

It can only effect the Policies that you add the templates to.

EXCEPT if you have the automatic update of ADM templates enabled (which is the default). This means that if you replace the local ADM template in Windows\INF with a newer one, then when you open an existing Policy that uses this ADM template, it will get updated with the newer one. Of course we all trust Microsoft, so any newer templates will be backward compatible...

This is not as dangerous as it sounds when you understand what an ADM Template actually does. It doesn't change the policy settings that are applied, it just changes the way you see it in the GUI. For instance if you enable certain policies in the ADM settings, then delete the ADM template, you can no longer see them in GPEDIT... but they are still there and still active. Put the ADM templates back, and you see the settings again. So the worst thing that can happen by replacing an ADM template with a dud template is that existing settings are no longer visible, even though the user still gets them

If this has confused you totally, the best thing is to say that you can trust Microsoft and adding the new templates to new policies will have no adverse effect.

Alan C

----- Original Message ----- From: <Dawn.Wertz@xxxxxxxxxxx>
To: <gptalk@xxxxxxxxxxxxx>
Cc: <gptalk@xxxxxxxxxxxxx>; <gptalk-bounce@xxxxxxxxxxxxx>
Sent: Friday, October 20, 2006 8:48 AM
Subject: [gptalk] Re: Question on adding ADM Templates.




Thank you for the response. I will be adding the templetates in on Monday.
Are there any potential side affects to other policies from adding the new
templates?







"Alan & Margaret" <Syspro@optushome .com.au> To Sent by: <gptalk@xxxxxxxxxxxxx> gptalk-bounce@fre cc elists.org Subject [gptalk] Re: Question on adding ADM 10/19/2006 06:33 Templates. PM


Please respond to gptalk@freelists. org






Hi Dawn,

The easiest way is to add the ADM templates to the Policies that you wish
to
use them in. This places them on the domain controller and everyone sees
them. This means that they are not visible in any of your other policies,
which is a good thing. (not like Vista, which has one receptacle for all
the
new ADMX files. So all Policies see the same files and if you change it for


one policy, it changes for all policies....)

There are some default templates that Microsoft automatically copies from
the local Windows/INF directory when you create a Policy. I have never
understood how it decides which ones to copy (Any ideas Darren?). And it
also (optionally) updates them from the local Windows/INF directory if
there
are newer ones there.

You can also set it up so that it uses the ADM files on the local
workstation, but I think that is a bit silly, since the user may have older


or newer versions etc.


Alan Cuthbertson


Policy Management Software:- http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml ADM Template Editor:- http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml Policy Log Reporter(Free) http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml

----- Original Message -----
From: <Dawn.Wertz@xxxxxxxxxxx>
To: <gptalk@xxxxxxxxxxxxx>
Sent: Friday, October 20, 2006 1:04 AM
Subject: [gptalk] Question on adding ADM Templates.



To have ADM template populate to all users who edit GPO's do they need to be installed on the domain controller or just on the workstation of the person using them? My main concern is the new IE 7 blocker template and the Office 2003 templates.

Any answers would be appreciated.

Thank you,


*********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

*********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/ ************************


***********************
You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/
************************

*********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/ ************************

Other related posts: