[gptalk] Re: Registry to ADM

=============================================================
I just have some general comments on the Reg to ADM utility
... and some on ADMX formats as well.
=============================================================

Use of the very convenient "Reg to ADM" utility does not mean we turn off our 
'thinking caps'. It'll do exactly what you ask it to do. It takes "registry" 
entries and builds an ADM template for them. What it does NOT do is add any 
intelligence to the resulting ADM template.

Sometimes, this is just fine:

Start ==> Set that reg value to "xxxxx" ==> Stop... ==> Save ADM template ==> 
Import ADM into a GPO ==> Done!

Really, if that's all you need, go for it. But... if you think you'll need 
'any' of the following questions answered, then you've got more work to do:

O  Was the new setting visible in the default GPO Editor interface? If not go 
turn that on.
O  What other values "can" the registry value be set to and what is that 
behavior? Hmmm...
O  What does this setting actually do (Explain text???)
O  How does this setting behave when Disabling or setting to Not Configured? 
(Explain text???)
O  When does the setting engage? Background GPO refresh? User Logoff/logon? 
Device shutdown/restart?  (Explain Text???)
O  Does what you are trying to do (call it "xxx") actually require setting 
several registry keys (all of which need to be on or have values set in order 
for the "xxx" behavior to engage)? Then perhaps you need an ADM template that 
sets all the values in a single interface and that'll take some customized ADM 
editing work.
O  Say it's six months from now. QuiYou set this up because? (Exaplin text???)

If you just need to turn something on, the utility is great. If you need more 
information, then you are going to need to edit the ADM template to add that 
information and alter any behaviors manually. Even the upcoming (okay, the "now 
released") Group Policy Preference Extension interface aren't going to add any 
information like this "for" you. What manually editing (or using ADM template 
Editing utilities) does for you is to allow you to add all that additional 
information. Personally, I find using an ADM Template Editor utility easier to 
work with because I usually already know the registry key I want to work with. 
I gather the relevant behavior explanation text. Then I'm able to do all the 
editing at once and see what it'll look like in the GPO Edtor interface almost 
right away.

Converting to ADMX Format
=========================
There is no particular reason that you "have to" convert an ADM template to the 
new ADMX format. The new operating systems read and operate with any custom ADM 
templates just fine. I would consider converting an ADM template to the new 
ADMX format when I (1) have quite a few settings in the template that would (2) 
be used by many different Admins. In that case, I would convert to the new 
format and then place a master copy up in the Central Store for access. A good 
example would be customized templates for the Windows Terminal Server 
environment where quite a few ADM customizations for third-party applications 
have been made. That's a great candidate for ADMX conversion and the master 
template would be maintained by your WTS/Citrix group.

One last tidbit. As more folks begin to use the new GPMC console 
(Vista+SP1+RSAT tolls or the versiojn built-into Windows Server 2008), take 
advantage of the new group policy comments fields. Lots of usability right 
there!

Jerry

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Sunshine Baines
Sent: Monday, March 24, 2008 7:11 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Registry to ADM

Alan,

That did it, thanks.  I want to thank everyone who helped on this.  I
can't wait to see policy maker, I'm hoping it's more intuitive because
I'm lacking in the ADM area.

Thanks again everyone.



On Mon, Mar 24, 2008 at 10:02 PM, Alan & Margaret
<syspro@xxxxxxxxxxxxxxxx> wrote:
>
>
>
> High Sunshine,
>
>
>
> You need the Checkbox Keyword.
>
>
>
>
> CLASS MACHINE
>
>
>
> CATEGORY "SYSTEM\CurrentControlSet\Control\CrashControl"
>
> KEYNAME "SYSTEM\CurrentControlSet\Control\CrashControl"
>
>
>
>  POLICY "AutoReboot"
>
>   PART "AutoReboot" CHECKBOX
>
>
>   VALUEON NUMERIC 1
>
>   VALUEOFF Numeric 0
>
>   VALUENAME "AutoReboot"
>
>   END PART
>
>  END POLICY
>
>
>
> END CATEGORY
>
>
>
>
> Alan Cuthbertson
>
>
>
>
>
>  Policy Management Software:-
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
>
>
>
> ADM Template Editor:-
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
>
>
>
> Policy Log Reporter(Free)
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Sunshine Baines
>
> Sent: Tuesday, 25 March 2008 12:18 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Registry to ADM
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Sunshine Baines
>
> Sent: Tuesday, 25 March 2008 12:18 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Registry to ADM
>
>
>
>
>
>
> I tried that and got an error when importing it.  Attached is the
>
> error.  Below is the modification I did.
>
>
>
> CLASS MACHINE
>
>
>
> CATEGORY "SYSTEM\CurrentControlSet\Control\CrashControl"
>
> KEYNAME "SYSTEM\CurrentControlSet\Control\CrashControl"
>
>
>
>  POLICY "AutoReboot"
>
>   PART "AutoReboot"
>
>   VALUEON NUMERIC 1
>
>   VALUEOFF Numeric 0
>
>   VALUENAME "AutoReboot"
>
>   END PART
>
>  END POLICY
>
>
>
> END CATEGORY
>
>
>
>
>
> On Mon, Mar 24, 2008 at 9:09 PM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:
>
> > Try replacing "Numeric" in that policy with the following:
>
> >
>
> > VALUEON NUMERIC 1
>
> > VALEOFF NUMERIC 0
>
> >
>
> > That will make Enabled 1 and Disabled 0.
>
> >
>
> > Darren
>
> >
>
> > -----Original Message-----
>
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
>
> > Behalf Of Sunshine Baines
>
> >
>
> > Sent: Monday, March 24, 2008 5:57 PM
>
> > To: gptalk@xxxxxxxxxxxxx
>
> > Subject: [gptalk] Re: Registry to ADM
>
> >
>
> > When I disable mine it deletes it from the registry.
>
> >
>
> > On Mon, Mar 24, 2008 at 8:43 PM, Darren Mar-Elia <darren@xxxxxxxxxx>
> wrote:
>
> > > For any numeric policies, unless you specify otherwise in the ADM,
>
> > enabling
>
> > > the policy sets it to 1 and disabling it sets it to 0.
>
> > >
>
> > > Darren
>
> > >
>
> > > -----Original Message-----
>
> > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> On
>
> > > Behalf Of Sunshine Baines
>
> > > Sent: Monday, March 24, 2008 5:34 PM
>
> > > To: gptalk@xxxxxxxxxxxxx
>
> > >
>
> > > Subject: [gptalk] Re: Registry to ADM
>
> > >
>
> > > Ok I think I got it working, but it will not let me choos a value of 0
>
> > > and autmatically sets it to 1.  What exactly am I missing in my ADM,
>
> > > so I can enter 0 in my group policy setting.
>
> > >
>
> > > On Mon, Mar 24, 2008 at 6:58 PM, Sunshine Baines
>
> > > <sunshine.baines@xxxxxxxxx> wrote:
>
> > > > Thanks for the repsonse.  Can you tak a look at my registry file and
>
> > > > ADM file.  I feel like I'm doing it wrong.  Thanks.
>
> > > >
>
> > > >
>
> > > >
>
> > > >
>
> > > > On Mon, Mar 24, 2008 at 6:53 PM, Nelson, Jamie R
>
> > > > <Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:
>
> > > > > When viewing administrative templates that contain "preference"
>
> > > > > settings, you must uncheck the "Only show policy settings that can
> be
>
> > > > > fully managed" checkbox under View > Filtering in the Group Policy
>
> > > > > editor.
>
> > > > >
>
> > > > > Jamie Nelson | Systems Engineer | Systems Support, Information
>
> > > > > Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
>
> > > > > 405.553.5687 | http://www.integrisok.com
>
> > > > >
>
> > > > >
>
> > > > > -----Original Message-----
>
> > > > > From: gptalk-bounce@xxxxxxxxxxxxx
> [mailto:gptalk-bounce@xxxxxxxxxxxxx]
>
> > > > > On Behalf Of Sunshine Baines
>
> > > > > Sent: Monday, March 24, 2008 4:44 PM
>
> > > > > To: gptalk@xxxxxxxxxxxxx
>
> > > > > Subject: [gptalk] Registry to ADM
>
> > > > >
>
> > > > > Today I was playing around with the regtoadm tool that came with
> NUTS.
>
> > > > >  I entered all my information in the registry file that I needed
>
> > > > > before converting it to ADM with the tool.  I imported the ADM file
>
> > > > > with GPMC in the Administrative Templates under computer
> configuration
>
> > > > > and only one registry entry seemed to work.  The others were just
>
> > > > > folders containing nothing.  Does anyone know what I might be doing
>
> > > > > wrong with the tool?
>
> > > > >
>
> > > > > Thanks,
>
> > > > > Sunshine
>
> > > > > ***********************
>
> > > > > You can unsubscribe from gptalk by sending email to
>
> > > > > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field
>
> > OR
>
> > > > > by logging into the freelists.org Web interface. Archives for the
> list
>
> > > > > are available at http://www.freelists.org/archives/gptalk/
>
> > > > > ************************
>
> > > > > ***********************
>
> > > > > You can unsubscribe from gptalk by sending email to
>
> > > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
> by
>
> > > logging into the freelists.org Web interface. Archives for the list are
>
> > > available at http://www.freelists.org/archives/gptalk/
>
> > > > > ************************
>
> > > > >
>
> > > >
>
> > > ***********************
>
> > > You can unsubscribe from gptalk by sending email to
>
> > > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
> by
>
> > > logging into the freelists.org Web interface. Archives for the list are
>
> > > available at http://www.freelists.org/archives/gptalk/
>
> > > ************************
>
> > >
>
> > > ***********************
>
> > > You can unsubscribe from gptalk by sending email to
>
> > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>
> > logging into the freelists.org Web interface. Archives for the list are
>
> > available at http://www.freelists.org/archives/gptalk/
>
> >
>
> > > ************************
>
> > >
>
> > ***********************
>
> > You can unsubscribe from gptalk by sending email to
>
> > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>
> > logging into the freelists.org Web interface. Archives for the list are
>
> > available at http://www.freelists.org/archives/gptalk/
>
> > ************************
>
> >
>
> > ***********************
>
> > You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at http://www.freelists.org/archives/gptalk/
>
>
>
> > ************************
>
> >
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: