importing admx templates into 2003 GPOs?

[markm75]

I cant seem to find much info on this one..

I simply want to import, for example, the new windows updates.admx template (located on vista at c:\windows\policydefinitions).. into my existing 2003 GPOs..

When I goto add/remove templates in the editor (even on a Vista machine editor).. it does not allow me to import .admx, only .adm's

Has anyone been able to do so as of yet or know how?

Thanks

 

[linney]

Did you come across these articles in your searching?

Managing Group Policy ADMX Files Step-by-Step Guide

http://www.microsoft.com/technet/windowsvista/library/02633470-396c-4e34-971a-0c5b090dc4fd.mspx

Group Policy in Windows Vista Beta 2 (February 09, 2006)

http://www.microsoft.com/technet/community/chats/trans/windowsnet/06_0209_TN_group.mspx

Managing Group Policy with Windows Vista (June 1, 2006)

http://www.microsoft.com/technet/community/chats/trans/network/06_0601_tn_wv.mspx

http://www.google.com/search?q=impo...ft:&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1

http://groups.google.com/groups?q=i...TF-8&startIndex=&startPage=1&um=1&sa=N&tab=wg

 

[markm75]

Yep.. those are what I had found.. unless I'm missing something, they dont address what to do if you run a 2003 domain, with GPO's.. I cant even get gpedit.msc in Vista, to add/remove templates of .admx format, letalone any 2003 gpo's I have out there...

 

[linney]

This is what it says in Gpedit Help in Vista Ultimate.

Add or Remove an Administrative Template
To add or remove an Administrative Template file (.admx, .adml, or .adm file)

Open the Group Policy object that you want to edit.

In the console tree, under either Computer Configuration or User Configuration, right-click Administrative Templates.

Click Add/Remove Templates.

Do one of the following:

To add a template, click Add. In the Policy Templates dialog box, click the template you want to add, and then click Open.


To remove a template, in the Current Policy Templates list, click the template, and then click Remove.


Additional Considerations
To complete this procedure, you must have Edit setting permission to edit a GPO. By default, members of the Domain Administrators security group, the Enterprise Administrators security group, or the Group Policy Creator Owners security group have Edit setting permission to edit a GPO.



See Also
Edit Administrative Templates




If you are trying the above are you getting any error message?

 

[markm75]

I've tried this on two different vista machines..

I open gpedit.msc, then I right click administrative templates.. add.. then goto c:\windows\policydefinitions (where all the admx's are)...

They dont appear, because its expecting adm files instead.

Even if they did appear, I doubt this would work on the domain GPO's.. as they are 2003 server based (not Longhorn)..

 

[milfordboy]

From what I have read, Vista Group Policy cannot be assigned to a OU or group. You can only copy a configuration to a central store on a DC and have different settings for an administrator or non-administrator.

If it is the case, it is going to cause me so many issues....

Also, on my network, Vista will not run the logon script. it will autenticate, and map a home drive, but nothing else.

 

[JonesNW]

The link below leads to the Vista version of the security guide. I used the XP version to help harden my firm’s laptops security.

Not totally relevant but pretty good none the less!

Hope its useful!

http://www.microsoft.com/downloads/...ED-7F35-4E72-BFB5-B84A526C1565&displaylang=en

A+,N+,S+,MCP,MCSA
70-270-passed
70-290-passed
70-291-passed
70-293-passed
70-294 - Pending

 

[milfordboy]

Well, I've tried adding the extra administrative templates too - and again, it will only allow the import of adm files and not ADMX - surely there is an issue with the software.

Anyone had any sucess?

 

[markm75]

I believe, someone correct me on this if i'm wrong, but if you open gpedit.msc on any Vista machine in a domain ...

and say you change the windows update settings to automatically update/install.. any other Vista machine in the domain follows that setting somehow.. I swear another Vista machine in my domain fell into this setting somehow.. unless I was wrong?

This seems like it shouldnt be possible though.

(i never could get the import of admx to work in gpo's)

 

[milfordboy]

Mark,

I thought that if you opened gpedit.msc on a vista machine when it is a part of a domain, with the policy definitions in the sysvol folder on a domain controller, it would automatically edit the centrally stored one instead of the local version! This may be the case why other vista machines are picking up the settings.

Dean