RE: Newer System.adm ?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hello Pat,

There is nothing wrong with your system.adm nor needs updating. You could
configure firewall exceptions thru your Administrative Template.
He will be more explicit if you read the text below.

"True Policies and Preferences
The Administrative Templates CSE has control over a part of the registry for
both user and computer registry hives and treats these specially. These parts
are for the computer and user hives respectively:

• HKEY_LOCAL_MACHINE\SOFTWARE\policies (preferred location)

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies

• HKEY_CURRENT_USER\SOFTWARE\policies (preferred location)

• HKEY_ CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies


These trees cannot be modified by a non-administrator. Because all keys and
values beneath these paths are erased before applying the resultant registry
policy settings, the registry policies applied in these subtrees will only
persist as long as a valid Group Policy setting exists. Policy settings that
are stored in these specific locations of the registry are known as true
policies.

All the policy settings in the standard Administrative Template files that
shipped with Windows 2000 Server and Windows Server 2003 use true policies.
This prevents the behavior that was often present in Windows NT 4.0, whereby
System Policies resulted in persistent settings in the user and computer
registry. The policy remained in effect until the value was reversed, either
by a counteracting policy or by editing the registry. These settings are
stored outside the approved registry locations listed and are known as
preferences."

You can read more at
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/74635e11-a0e2-42e0-b3c6-a5ccbc43c931.mspx

Regards,
.

Relevant Pages

  • Re: Local policy, IE and SP2...
    ... I must mention here that I rarely use GPEdit and almost always I change the Explorer or System policies through registry. ... The same I did for those tests I mentioned for SP2. ... this is true - those policies will not allow you to lock user accounts from launching applications from hidden drives. ...
    (microsoft.public.windowsxp.embedded)
  • RE: Moving from NT4 policy to Group Policy
    ... The mixed environment of Group policies and System policies ... policies which are permanently applied in the registry and Group Policy ... which is all documented by MS for non GPO ...
    (microsoft.public.windows.server.active_directory)
  • Re: What program is used to write events to the event log??????
    ... I believe that the event logging functionality is implemented as ... > issue....whenever there is an exe being started it normally writes this ... a few days ago I posted a question about wether these policies could ... > search function it can only be found in the registry at the three above ...
    (microsoft.public.windowsxp.security_admin)
  • Re: disable double clicking attachments
    ... separate of the e-mail is the second prompt. ... You can't do what you want in Outlook. ... They could edit the registry to add filetypes to the Level1Remove ... Using Exchange would have its policies override what the user ...
    (microsoft.public.outlook.general)
  • Re: Group Policy question
    ... System policies is an old way that was used in the pre Windows 2000 days. ... I do know to not mess with the registry ... help pages in Group Policy and read something about System Policy and how ... able to use it to some degree to lock down the limited account I created I ...
    (microsoft.public.windowsxp.security_admin)