[gptalk] Re: Group Policy and Zenworks
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Tue, 4 Nov 2008 14:39:48 -0800
Yea, I can envision what they are doing but geez, what a hack.
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Alan & Margaret
Sent: Tuesday, November 04, 2008 2:30 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Group Policy and Zenworks
Hi Darren,
It looks like they have just lifted the Sysvol structure from Microsoft..
They build a common directory (e.g.
<file:///\\Central\ZENAPPS1\Win32apps\policies>
\\Central\ZENAPPS1\Win32apps\policies) then create a subdirectory for each
GPO, then create a directory structure like:-
AdminLecWinXPSP2\gpt.ini
AdminLecWinXPSP2\Adm\admfiles.ini
AdminLecWinXPSP2\Adm\conf.adm
AdminLecWinXPSP2\Adm\HKCUUserShellFolders.adm
AdminLecWinXPSP2\Adm\inetres.adm
AdminLecWinXPSP2\Adm\system.adm
AdminLecWinXPSP2\Adm\wmplayer.adm
AdminLecWinXPSP2\Adm\wuau.adm
AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\IPS1.dat
AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\XPSec.dat
AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\ZenOSver.inf
AdminLecWinXPSP2\User\Registry.pol
AdminLecWinXPSP2\User\MICROSOFT\IEAK\install.ins
AdminLecWinXPSP2\User\MICROSOFT\IEAK\BRANDING\ZONES\seczones.inf
AdminLecWinXPSP2\User\MICROSOFT\IEAK\BRANDING\ZONES\seczrsop.inf
where AdminLecWinXPSP2 is the GPO name. Look familiar?
It sounds like they know about OU's as well..
I am guessing that they leverage of the Microsoft CSE processing somehow for
instance, running the ADM Template engine but pointing it at
\\Central\ZENAPPS1\Win32apps\policies\AdminLecWinXPSP2\User\Registry.pol
<file:///\\Central\ZENAPPS1\Win32apps\policies\AdminLecWinXPSP2\User\Registr
y.pol> .
I did find a post on the web that suggested they don't have GPMC. Instead
they copy the files down to the local machine, run GPEDIT, then copy it back
to the central location...
Alan Cuthbertson
_____
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Wednesday, 5 November 2008 9:02 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Group Policy and Zenworks
Alan-
I've never seen anything like this and I would be highly surprised if you
were able to find such documentation (except perhaps in the bowels of
Novell). So, I know next to nothing about Zenworks but are you saying that
it can actually store GPOs that are straight from an AD environment, without
AD being present?
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Alan & Margaret
Sent: Tuesday, November 04, 2008 1:29 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Group Policy and Zenworks
Hi,
I realise that it may be heresy to submit this query to a Microsoft Group
Policy list, but here goes anyway.
I had a query from a potential customer as to whether my software would
report on Group Policies on Zenworks. He sent me a list of the directory
structure which Zenworks uses to store Group Policy and it looks the same.
It would seem likely that the Novell AD equivalent would hold the AD
equivalent info about each GPO and the Links to of the GPO to each OU.
What I am looking for is a contact or web site that details the comparisons
between ZenWorks' implementation and Microsoft's implementation of Group
Policy, especially the equivalent AD calls.
Alan Cuthbertson
Other related posts:
