[gptalk] Re: Registry to ADM
- From: "Cruz, Jerome L" <jerome.l.cruz@xxxxxxxxxx>
- To: "gptalk@xxxxxxxxxxxxx" <gptalk@xxxxxxxxxxxxx>
- Date: Mon, 31 Mar 2008 13:40:19 -0700
=============================================================
I just have some general comments on the Reg to ADM utility
... and some on ADMX formats as well.
=============================================================
Use of the very convenient "Reg to ADM" utility does not mean we turn off our
'thinking caps'. It'll do exactly what you ask it to do. It takes "registry"
entries and builds an ADM template for them. What it does NOT do is add any
intelligence to the resulting ADM template.
Sometimes, this is just fine:
Start ==> Set that reg value to "xxxxx" ==> Stop... ==> Save ADM template ==>
Import ADM into a GPO ==> Done!
Really, if that's all you need, go for it. But... if you think you'll need
'any' of the following questions answered, then you've got more work to do:
O Was the new setting visible in the default GPO Editor interface? If not go
turn that on.
O What other values "can" the registry value be set to and what is that
behavior? Hmmm...
O What does this setting actually do (Explain text???)
O How does this setting behave when Disabling or setting to Not Configured?
(Explain text???)
O When does the setting engage? Background GPO refresh? User Logoff/logon?
Device shutdown/restart? (Explain Text???)
O Does what you are trying to do (call it "xxx") actually require setting
several registry keys (all of which need to be on or have values set in order
for the "xxx" behavior to engage)? Then perhaps you need an ADM template that
sets all the values in a single interface and that'll take some customized ADM
editing work.
O Say it's six months from now. QuiYou set this up because? (Exaplin text???)
If you just need to turn something on, the utility is great. If you need more
information, then you are going to need to edit the ADM template to add that
information and alter any behaviors manually. Even the upcoming (okay, the "now
released") Group Policy Preference Extension interface aren't going to add any
information like this "for" you. What manually editing (or using ADM template
Editing utilities) does for you is to allow you to add all that additional
information. Personally, I find using an ADM Template Editor utility easier to
work with because I usually already know the registry key I want to work with.
I gather the relevant behavior explanation text. Then I'm able to do all the
editing at once and see what it'll look like in the GPO Edtor interface almost
right away.
Converting to ADMX Format
=========================
There is no particular reason that you "have to" convert an ADM template to the
new ADMX format. The new operating systems read and operate with any custom ADM
templates just fine. I would consider converting an ADM template to the new
ADMX format when I (1) have quite a few settings in the template that would (2)
be used by many different Admins. In that case, I would convert to the new
format and then place a master copy up in the Central Store for access. A good
example would be customized templates for the Windows Terminal Server
environment where quite a few ADM customizations for third-party applications
have been made. That's a great candidate for ADMX conversion and the master
template would be maintained by your WTS/Citrix group.
One last tidbit. As more folks begin to use the new GPMC console
(Vista+SP1+RSAT tolls or the versiojn built-into Windows Server 2008), take
advantage of the new group policy comments fields. Lots of usability right
there!
Jerry
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Sunshine Baines
Sent: Monday, March 24, 2008 7:11 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Registry to ADM
Alan,
That did it, thanks. I want to thank everyone who helped on this. I
can't wait to see policy maker, I'm hoping it's more intuitive because
I'm lacking in the ADM area.
Thanks again everyone.
On Mon, Mar 24, 2008 at 10:02 PM, Alan & Margaret
<syspro@xxxxxxxxxxxxxxxx> wrote:
>
>
>
> High Sunshine,
>
>
>
> You need the Checkbox Keyword.
>
>
>
>
> CLASS MACHINE
>
>
>
> CATEGORY "SYSTEM\CurrentControlSet\Control\CrashControl"
>
> KEYNAME "SYSTEM\CurrentControlSet\Control\CrashControl"
>
>
>
> POLICY "AutoReboot"
>
> PART "AutoReboot" CHECKBOX
>
>
> VALUEON NUMERIC 1
>
> VALUEOFF Numeric 0
>
> VALUENAME "AutoReboot"
>
> END PART
>
> END POLICY
>
>
>
> END CATEGORY
>
>
>
>
> Alan Cuthbertson
>
>
>
>
>
> Policy Management Software:-
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
>
>
>
> ADM Template Editor:-
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
>
>
>
> Policy Log Reporter(Free)
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Sunshine Baines
>
> Sent: Tuesday, 25 March 2008 12:18 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Registry to ADM
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Sunshine Baines
>
> Sent: Tuesday, 25 March 2008 12:18 PM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Registry to ADM
>
>
>
>
>
>
> I tried that and got an error when importing it. Attached is the
>
> error. Below is the modification I did.
>
>
>
> CLASS MACHINE
>
>
>
> CATEGORY "SYSTEM\CurrentControlSet\Control\CrashControl"
>
> KEYNAME "SYSTEM\CurrentControlSet\Control\CrashControl"
>
>
>
> POLICY "AutoReboot"
>
> PART "AutoReboot"
>
> VALUEON NUMERIC 1
>
> VALUEOFF Numeric 0
>
> VALUENAME "AutoReboot"
>
> END PART
>
> END POLICY
>
>
>
> END CATEGORY
>
>
>
>
>
> On Mon, Mar 24, 2008 at 9:09 PM, Darren Mar-Elia <darren@xxxxxxxxxx> wrote:
>
> > Try replacing "Numeric" in that policy with the following:
>
> >
>
> > VALUEON NUMERIC 1
>
> > VALEOFF NUMERIC 0
>
> >
>
> > That will make Enabled 1 and Disabled 0.
>
> >
>
> > Darren
>
> >
>
> > -----Original Message-----
>
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
>
> > Behalf Of Sunshine Baines
>
> >
>
> > Sent: Monday, March 24, 2008 5:57 PM
>
> > To: gptalk@xxxxxxxxxxxxx
>
> > Subject: [gptalk] Re: Registry to ADM
>
> >
>
> > When I disable mine it deletes it from the registry.
>
> >
>
> > On Mon, Mar 24, 2008 at 8:43 PM, Darren Mar-Elia <darren@xxxxxxxxxx>
> wrote:
>
> > > For any numeric policies, unless you specify otherwise in the ADM,
>
> > enabling
>
> > > the policy sets it to 1 and disabling it sets it to 0.
>
> > >
>
> > > Darren
>
> > >
>
> > > -----Original Message-----
>
> > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> On
>
> > > Behalf Of Sunshine Baines
>
> > > Sent: Monday, March 24, 2008 5:34 PM
>
> > > To: gptalk@xxxxxxxxxxxxx
>
> > >
>
> > > Subject: [gptalk] Re: Registry to ADM
>
> > >
>
> > > Ok I think I got it working, but it will not let me choos a value of 0
>
> > > and autmatically sets it to 1. What exactly am I missing in my ADM,
>
> > > so I can enter 0 in my group policy setting.
>
> > >
>
> > > On Mon, Mar 24, 2008 at 6:58 PM, Sunshine Baines
>
> > > <sunshine.baines@xxxxxxxxx> wrote:
>
> > > > Thanks for the repsonse. Can you tak a look at my registry file and
>
> > > > ADM file. I feel like I'm doing it wrong. Thanks.
>
> > > >
>
> > > >
>
> > > >
>
> > > >
>
> > > > On Mon, Mar 24, 2008 at 6:53 PM, Nelson, Jamie R
>
> > > > <Jamie.Nelson@xxxxxxxxxxxxxxxxxxx> wrote:
>
> > > > > When viewing administrative templates that contain "preference"
>
> > > > > settings, you must uncheck the "Only show policy settings that can
> be
>
> > > > > fully managed" checkbox under View > Filtering in the Group Policy
>
> > > > > editor.
>
> > > > >
>
> > > > > Jamie Nelson | Systems Engineer | Systems Support, Information
>
> > > > > Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
>
> > > > > 405.553.5687 | http://www.integrisok.com
>
> > > > >
>
> > > > >
>
> > > > > -----Original Message-----
>
> > > > > From: gptalk-bounce@xxxxxxxxxxxxx
> [mailto:gptalk-bounce@xxxxxxxxxxxxx]
>
> > > > > On Behalf Of Sunshine Baines
>
> > > > > Sent: Monday, March 24, 2008 4:44 PM
>
> > > > > To: gptalk@xxxxxxxxxxxxx
>
> > > > > Subject: [gptalk] Registry to ADM
>
> > > > >
>
> > > > > Today I was playing around with the regtoadm tool that came with
> NUTS.
>
> > > > > I entered all my information in the registry file that I needed
>
> > > > > before converting it to ADM with the tool. I imported the ADM file
>
> > > > > with GPMC in the Administrative Templates under computer
> configuration
>
> > > > > and only one registry entry seemed to work. The others were just
>
> > > > > folders containing nothing. Does anyone know what I might be doing
>
> > > > > wrong with the tool?
>
> > > > >
>
> > > > > Thanks,
>
> > > > > Sunshine
>
> > > > > ***********************
>
> > > > > You can unsubscribe from gptalk by sending email to
>
> > > > > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field
>
> > OR
>
> > > > > by logging into the freelists.org Web interface. Archives for the
> list
>
> > > > > are available at //www.freelists.org/archives/gptalk/
>
> > > > > ************************
>
> > > > > ***********************
>
> > > > > You can unsubscribe from gptalk by sending email to
>
> > > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
> by
>
> > > logging into the freelists.org Web interface. Archives for the list are
>
> > > available at //www.freelists.org/archives/gptalk/
>
> > > > > ************************
>
> > > > >
>
> > > >
>
> > > ***********************
>
> > > You can unsubscribe from gptalk by sending email to
>
> > > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
> by
>
> > > logging into the freelists.org Web interface. Archives for the list are
>
> > > available at //www.freelists.org/archives/gptalk/
>
> > > ************************
>
> > >
>
> > > ***********************
>
> > > You can unsubscribe from gptalk by sending email to
>
> > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>
> > logging into the freelists.org Web interface. Archives for the list are
>
> > available at //www.freelists.org/archives/gptalk/
>
> >
>
> > > ************************
>
> > >
>
> > ***********************
>
> > You can unsubscribe from gptalk by sending email to
>
> > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>
> > logging into the freelists.org Web interface. Archives for the list are
>
> > available at //www.freelists.org/archives/gptalk/
>
> > ************************
>
> >
>
> > ***********************
>
> > You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
>
>
>
> > ************************
>
> >
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts: