Re: Help with new ADM template

Super...duper

thanks Torgeir...


M

"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@xxxxxxxxx> wrote in message
news:Opq6R9pcFHA.3120@xxxxxxxxxxxxxxxxxxxxxxx
> Mike wrote:
>
>> I am new to this all ADM files.
>>
>> I have read numerous documentation on how to add ADM template:
>> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/gptext_addtemplate.mspx
>> http://support.microsoft.com/?id=842933
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;816662
>>
>> But still have some questions:
>>
>> First a little bit about my network.
>> Windows 2000 server and Windows 2000 pro.
>>
>> I am about to migrate my 500 workstation to WinXP Pro SP2.
>> I want to take avantage all the new GPO to manage my Windows XP SP2
>> (firewall, WSUS...etc)
>>
>> We don't use GPO yet, that is why I am asking the question:
>>
>> How to I add the new template from Windows XP SP2 to my Windows 2000 DC?
>> Can I simply copy the new ADM template to my windows 2000 DC (in
>> c:\windows\inf) and replace the old one,
>> and then add them like the above article mentionned^
>>
>> I also read that I could add them from a Windows XP SP2? From my windows
>> XP
>> SP2, if I add those new template, will they get copied to my win2000
>> server
>> DC?
> Hi,
>
> If you have used a Windows XP SP2 computer to administer the Group
> Policy settings in the domain, the adm files should automatically
> have been updated.
>
> Group Policy Template Behavior in Windows Server 2003
> http://support.microsoft.com/kb/316977
>
> I would think most things in the link above applies to Win2k as well.
>
> Recommendations for managing Group Policy administrative
> template (.adm) files
> http://support.microsoft.com/kb/816662
>
> A discussion about it here:
> http://groups-beta.google.com/group/microsoft.public.windows.server.active_directory/browse_frm/thread/a5d8a9f8fdf5f75a/130e4d93db7c9984?q=sp2+adm+sysvol+update+sp2&_done=%2Fgroups%3Fas_q%3Dsp2+adm+sysvol+update+sp2%26num%3D10%26scoring%3Dr%26hl%3Den%26ie%3DUTF-8%26as_epq%3D%26as_oq%3D%26as_eq%3D%26as_ugroup%3D%26as_usubject%3D%26as_uauthors%3D%26as_drrb%3Dq%26as_qdr%3D%26as_mind%3D1%26as_minm%3D1%26as_miny%3D1981%26as_maxd%3D13%26as_maxm%3D12%26as_maxy%3D2004%26safe%3Doff%26&_doneTitle=Back+to+Search&&d#130e4d93db7c9984
>
> See here on how Jeff updated the Default Domain Policy templates
> manually when they would not update automatically:
> http://groups-beta.google.com/group/microsoft.public.win2000.group_policy/browse_frm/thread/3837195be66e6e5c/fa468982fef80549?q=sp2+adm+sysvol+update+sp2&_done=%2Fgroups%3Fas_q%3Dsp2+adm+sysvol+update+sp2%26num%3D10%26scoring%3Dr%26hl%3Den%26ie%3DUTF-8%26as_epq%3D%26as_oq%3D%26as_eq%3D%26as_ugroup%3D%26as_usubject%3D%26as_uauthors%3D%26as_drrb%3Dq%26as_qdr%3D%26as_mind%3D1%26as_minm%3D1%26as_miny%3D1981%26as_maxd%3D13%26as_maxm%3D12%26as_maxy%3D2004%26safe%3Doff%26&_doneTitle=Back+to+Search&&d#fa468982fef80549
>
>
> You can also download the latest .adm files from here:
>
> http://go.microsoft.com/fwlink/?linkid=31057
>
> If you install the WinXP SP2 .adm files on the domain controller, but
> you don't use WinXP SP2 to edit the GPO settings, you may you get the
> message below, install the hotfix that is available in the KB article
> in the link below to solve this.
>
> "The following entry in the [strings] section is too long and has
> been truncated" error message when you try to modify or to view GPOs
> in Windows Server 2003, Windows XP Professional, or Windows 2000
> http://support.microsoft.com/?id=842933
>
>
> and just in case you haven't seen it already:
>
> Managing Windows XP Service Pack 2 Features Using Group Policy
> http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngintro.mspx
>
>
>
> Note that the wuau.adm that comes with WSUS (inside wucltui.cab) is
> newer that the one in WinXP SP2.
>
> This is missing in the WinXP SP2 wuau.adm:
>
>
> POLICY !!ElevateNonAdmins_Title
> KEYNAME "Software\Policies\Microsoft\Windows\WindowsUpdate"
> #if version >= 4
> SUPPORTED !!SUPPORTED_WindowXPSP1
> #endif
>
> #if version >= 3
> EXPLAIN !!ElevateNonAdmins_Help
> #endif
>
> VALUENAME "ElevateNonAdmins"
> VALUEON NUMERIC 1
> VALUEOFF NUMERIC 0
> END POLICY
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx


.

Relevant Pages

  • multiple error messages - string too long - MS White Paper excerpt - kb 842933
    ... Some .adm files installed by SP2 do not fully load on earlier versions ... of gpedit, which is present by default in Windows Server 2003, Windows ... The error messages indicate that a string is too long. ...
    (microsoft.public.win2000.group_policy)
  • Re: Firewall
    ... Connections -> Windows Firewall. ... This requires the XP SP2 .adm files. ... > My computer's tellin me it's getting the firewall settings from the ...
    (microsoft.public.win2000.group_policy)
  • Re: AD Integrity Checker ??
    ... To start .ADM files are not related to security policies so the XP SP2 ... The behaviour you're seeing with folder redirection, ... Windows Platform Support Team ...
    (microsoft.public.win2000.group_policy)
  • Problems with SP2 GPO Templates
    ... I dropped the 6 ADM files for SP2 into the INF ... folder on my two Windows 2000 servers to give me GPO support for SP2. ... I have deleted all the ADM files from both servers and restored the old ones ...
    (microsoft.public.windows.server.active_directory)
  • Re: Will SP2 GPO admin templates overwrite SP1s?
    ... > SP1 GPOs, it will add some some GPOs such as the GPOs for the firewalls. ... > don't use WinXP SP2 to edit the GPO settings, you may you get the message ... > truncated" error message when you try to modify or to view GPOs in Windows ... > Recommendations for managing Group Policy administrative template ...
    (microsoft.public.windowsxp.security_admin)