| Author | Messages | |
JackKopenski
Posts:19
 | | 03/12/2010 6:29 PM |
| Hello,
I would like to start to use a central store for my templates. I
currently have AD running on 2003 DC's, however I am also using some
Vista templates and now would like to use Windows 7 too.
I currently have a folder on my 2003 DC called
\\FQDN\SYSVOL\FQDN\policies which contains my exiting policy folders (
like {00446A88-1953-42AE- etc.} ). The instructions in KB929841 state
"Copy all files from the PolicyDefinitions folder on a Windows
Vista-based client computer (I assume Windows 7 also) to the
PolicyDefinitions folder on the domain controller. "
Q1. So should I just copy the "en-US" folder from my Vista machine, and
all .admx files from my Windows 7 machine into the newly created
\PolicyDefinitions folder on my DC?
Q2. Will my old policies which use the .adm templates stored on the DC
at \C$\Windows\inf continue to use that .adm template or is it smart
enough to now use the central store version, or do I need to remove the
old ones from the \inf folder?
Q3. Since I am using old .adm templates, some Vista, and now Windows 7
templates, will they all live together without confusion in the same
folder, or am I missing some steps? Or will the Windows 7 version
include everything past and present?
I am having trouble convincing myself that I only need to copy the new
templates into that policydefinitions folder and I am done, no cleanup,
etc.
Jack Kopenski
The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it.
| | | |
| klas9574
Posts:24
| | 03/12/2010 7:55 PM |
| Q1+Q3: The Windows 7 ADMX files have the settings for older versions as well, so you will only want to grab the .admx and .adml (En-Us) from Windows 7.
Q2: Whether the ADM or ADMX files are used is dependent upon the editor chosen. If you edit from an XP or 2003 machine, they will use ADM. Best practice here is that when you make the switch to using ADMX based policy, only do GPO editing from Vista/2008 or newer machines. You’re setting up a situation where you will only be editing GPO’s from a Vista or Win7 workstation with RSAT installed and will NOT edit from the 2003 DC’s directly. My suggestion in this case is to have 2 workstations with RSAT installed, with one being a backup in case the “main” one goes down.
When I made the change over myself, I had a few custom ADM files. I took the time to convert these to ADMX/ADML, placed them into the central store, and removed the original ADM files.
Hope this helps a little,
Scott Klassen
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Kopenski, Jack
Sent: Friday, March 12, 2010 12:20 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Conversion to Central Store
Hello,
I would like to start to use a central store for my templates. I currently have AD running on 2003 DC's, however I am also using some Vista templates and now would like to use Windows 7 too.
I currently have a folder on my 2003 DC called <file:///\\FQDN\SYSVOL\FQDN\policies> \\FQDN\SYSVOL\FQDN\policies which contains my exiting policy folders ( like {00446A88-1953-42AE- etc.} ). The instructions in KB929841 state "Copy all files from the PolicyDefinitions folder on a Windows Vista-based client computer (I assume Windows 7 also) to the PolicyDefinitions folder on the domain controller. "
Q1. So should I just copy the "en-US" folder from my Vista machine, and all .admx files from my Windows 7 machine into the newly created \PolicyDefinitions folder on my DC?
Q2. Will my old policies which use the .adm templates stored on the DC at \C$\Windows\inf continue to use that .adm template or is it smart enough to now use the central store version, or do I need to remove the old ones from the \inf folder?
Q3. Since I am using old .adm templates, some Vista, and now Windows 7 templates, will they all live together without confusion in the same folder, or am I missing some steps? Or will the Windows 7 version include everything past and present?
I am having trouble convincing myself that I only need to copy the new templates into that policydefinitions folder and I am done, no cleanup, etc.
Jack Kopenski
The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it.
| | | |
| JackKopenski
Posts:19
| | 03/12/2010 9:28 PM |
| Scott,
Ahh, I think a light bulb just went off in my dark head. The templates
are only used when the GPO is created and I need not worry about the GPO
using the correct version every time it runs?
If I do not get around to converting my ADM files to ADMX can I still
copy them into the PolicyDefinitions folder with the ADMX files?
thanks for insight.
Jack
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Scott Klassen
Sent: Friday, March 12, 2010 2:48 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Conversion to Central Store
Q1+Q3: The Windows 7 ADMX files have the settings for older versions as
well, so you will only want to grab the .admx and .adml (En-Us) from
Windows 7.
Q2: Whether the ADM or ADMX files are used is dependent upon the editor
chosen. If you edit from an XP or 2003 machine, they will use ADM.
Best practice here is that when you make the switch to using ADMX based
policy, only do GPO editing from Vista/2008 or newer machines. You're
setting up a situation where you will only be editing GPO's from a Vista
or Win7 workstation with RSAT installed and will NOT edit from the 2003
DC's directly. My suggestion in this case is to have 2 workstations
with RSAT installed, with one being a backup in case the "main" one goes
down.
When I made the change over myself, I had a few custom ADM files. I
took the time to convert these to ADMX/ADML, placed them into the
central store, and removed the original ADM files.
Hope this helps a little,
Scott Klassen
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Kopenski, Jack
Sent: Friday, March 12, 2010 12:20 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Conversion to Central Store
Hello,
I would like to start to use a central store for my templates. I
currently have AD running on 2003 DC's, however I am also using some
Vista templates and now would like to use Windows 7 too.
I currently have a folder on my 2003 DC called
\\FQDN\SYSVOL\FQDN\policies <file:///\\FQDN\SYSVOL\FQDN\policies>
which contains my exiting policy folders ( like {00446A88-1953-42AE-
etc.} ). The instructions in KB929841 state "Copy all files from the
PolicyDefinitions folder on a Windows Vista-based client computer (I
assume Windows 7 also) to the PolicyDefinitions folder on the domain
controller. "
Q1. So should I just copy the "en-US" folder from my Vista machine, and
all .admx files from my Windows 7 machine into the newly created
\PolicyDefinitions folder on my DC?
Q2. Will my old policies which use the .adm templates stored on the DC
at \C$\Windows\inf continue to use that .adm template or is it smart
enough to now use the central store version, or do I need to remove the
old ones from the \inf folder?
Q3. Since I am using old .adm templates, some Vista, and now Windows 7
templates, will they all live together without confusion in the same
folder, or am I missing some steps? Or will the Windows 7 version
include everything past and present?
I am having trouble convincing myself that I only need to copy the new
templates into that policydefinitions folder and I am done, no cleanup,
etc.
Jack Kopenski
The contents of this e-mail are intended for the named addressee only.
It contains information that may be confidential. Unless you are the
named addressee or an authorized designee, you may not copy or use it,
or disclose it to anyone else. If you received it in error please notify
us immediately and then destroy it.
| | | |
| JamieNelson
Posts:166
| | 03/12/2010 10:59 PM |
| It's not that the templates are only used when the GPO is created, they
are needed anytime you edit a GPO or are viewing its settings from the
GPMC console. Think of ADM/ADMX files as a glossary for all the policy
settings you can set on a machine. Take for example, setting any
Administrative Template setting in a GPO. Admin Template settings are
nothing more than registry entries. However, without the ADM/ADMX files
as our guide, we'd have to know every registry key and exactly what it
does to administer Group Policy efficiently. So, in short, ADM/ADMX
files are not the polices themselves, but the reference for the Group
Policy Object Editor. I'm starting to ramble here so hopefully that
makes sense.
So, your ADM files don't need to be copied to the Central Store. They
should reside in the SYSVOL folder of each GPO where they are utilized.
However, if you do covert your custom ADMs to ADMX you could move them
there and delete from each GPO. This of course assumes you are only
doing edits on Vista, Windows 7, or Server 2008 systems.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Kopenski, Jack
Sent: Friday, March 12, 2010 3:14 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Conversion to Central Store
Scott,
Ahh, I think a light bulb just went off in my dark head. The templates
are only used when the GPO is created and I need not worry about the GPO
using the correct version every time it runs?
If I do not get around to converting my ADM files to ADMX can I still
copy them into the PolicyDefinitions folder with the ADMX files?
thanks for insight.
Jack
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Scott Klassen
Sent: Friday, March 12, 2010 2:48 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Conversion to Central Store
Q1+Q3: The Windows 7 ADMX files have the settings for older versions as
well, so you will only want to grab the .admx and .adml (En-Us) from
Windows 7.
Q2: Whether the ADM or ADMX files are used is dependent upon the editor
chosen. If you edit from an XP or 2003 machine, they will use ADM.
Best practice here is that when you make the switch to using ADMX based
policy, only do GPO editing from Vista/2008 or newer machines. You're
setting up a situation where you will only be editing GPO's from a Vista
or Win7 workstation with RSAT installed and will NOT edit from the 2003
DC's directly. My suggestion in this case is to have 2 workstations
with RSAT installed, with one being a backup in case the "main" one goes
down.
When I made the change over myself, I had a few custom ADM files. I
took the time to convert these to ADMX/ADML, placed them into the
central store, and removed the original ADM files.
Hope this helps a little,
Scott Klassen
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Kopenski, Jack
Sent: Friday, March 12, 2010 12:20 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Conversion to Central Store
Hello,
I would like to start to use a central store for my templates. I
currently have AD running on 2003 DC's, however I am also using some
Vista templates and now would like to use Windows 7 too.
I currently have a folder on my 2003 DC called
\\FQDN\SYSVOL\FQDN\policies <file:///\\FQDN\SYSVOL\FQDN\policies>
which contains my exiting policy folders ( like {00446A88-1953-42AE-
etc.} ). The instructions in KB929841 state "Copy all files from the
PolicyDefinitions folder on a Windows Vista-based client computer (I
assume Windows 7 also) to the PolicyDefinitions folder on the domain
controller. "
Q1. So should I just copy the "en-US" folder from my Vista machine, and
all .admx files from my Windows 7 machine into the newly created
\PolicyDefinitions folder on my DC?
Q2. Will my old policies which use the .adm templates stored on the DC
at \C$\Windows\inf continue to use that .adm template or is it smart
enough to now use the central store version, or do I need to remove the
old ones from the \inf folder?
Q3. Since I am using old .adm templates, some Vista, and now Windows 7
templates, will they all live together without confusion in the same
folder, or am I missing some steps? Or will the Windows 7 version
include everything past and present?
I am having trouble convincing myself that I only need to copy the new
templates into that policydefinitions folder and I am done, no cleanup,
etc.
Jack Kopenski
The contents of this e-mail are intended for the named addressee only.
It contains information that may be confidential. Unless you are the
named addressee or an authorized designee, you may not copy or use it,
or disclose it to anyone else. If you received it in error please notify
us immediately and then destroy it.
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
|
|