Re: [msh] Some msh setup questions

Tech-Archive recommends: Fix windows errors by optimizing your registry

I don't believe the Group Policy code is in Beta 2, but it will be in the Beta 3 arriving soon.

Also, our ADM file isn't included in the installer for Beta 3, so rolling your own is your only avenue.

The machine-wide settings go to HKLM:\Software\Policies\Microsoft\MSH
The per-user settings go to HKCU:\Software\Policies\Microsoft\MSH

When controlled through Group Policy, a DWORD ("Numeric" in ADM language) called "EnableScripts" must exist and be set to 1. From there, the "ExecutionPolicy" string value controls the execution policy. If EnableScripts is set to 0, the execution policy is understood to be Restricted.

Machine-wide settings override per-user settings, which override the local preference (currently in HKLM:\Software\Microsoft\MSH)

--
Lee Holmes [MSFT]
Microsoft Command Shell Development
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.


-----Original Message-----
From: Thomas Lee
Posted At: Friday, January 06, 2006 1:33 AM
Posted To: microsoft.public.windows.server.scripting
Conversation: [msh] Some msh setup questions
Subject: Re: [msh] Some msh setup questions

In message <43baea87$1@xxxxxxxxxxxxxxxxxx>,
lee.holmes@xxxxxxxxxxxxxxxxxxxx writes
>We also do support Group Policy management of this setting,

I saw no ADM file being installed (and I looked pretty deeply).

Where is the adm file, and what is the policy key (to enable me to roll
my own)

--
Thomas Lee
doctordns@xxxxxxxxx
RD - Europe
MVP - Admin Frameworks and Security
.

Relevant Pages

  • Re: Configuring session time limit question
    ... Sorry I was talking about Group Policy. ... I don't know how to modify those settings in the CCC. ... >> you can edit the ADM file directly to put in the correct amount of time. ...
    (microsoft.public.windows.terminal_services)
  • Re: All IE7 GPO settings show up as "Extra Registry Settings" in RSOP?
    ... I then deleted and re-linked the inetres from the GPO I was modifying ... so the size would show right and the new IE7 settings would show up. ... That happens when the Group Policy Editor reads the Registry.POL file and it encounters sections and keys that have no corresponding ADM file it can find to display a category to. ...
    (microsoft.public.windows.group_policy)
  • Editing registry and ADM files
    ... I'm trying to solve a problem related to group policy and the registry. ... I use an adm file and make the appropriate settings on my machine. ...
    (microsoft.public.windowsxp.general)
  • Re: Custom ADM properties not shown in GPO
    ... To view preference settings for all ADM files in the Group Policy ... I've created a custom ADM file to make apply a registry change and ...
    (microsoft.public.windows.group_policy)
  • Re: Custom ADM properties not shown in GPO
    ... To view preference settings for all ADM files in the Group Policy ... I've created a custom ADM file to make apply a registry change and ...
    (microsoft.public.windows.group_policy)