Windows server 2003 adm

Published by & filed under Misc Software. Last updated .

I was dig­ging thru an old back-up CD today and stumbled upon a cus­tom ADM file I cre­ated when I was admin­is­ter­ing a Win­dows Serv­er 2003 / Win­dows XP Domain. To use, copy the fol­low­ing code into note­pad, save the file with a .adm exten­sion on the system32 folder of a domain serv­er. Open Group Policy edit­or and add the file, then browse to the “Tech­ni­cians Set­tings” to enable any of the settings.

There are Machine and User set­tings including…
Enabling the EZ-GPO utility
Syn­aptics touch­pad sens­it­iv­ity fix
Dis­able lots of start-up applications
Dis­able lots of unneeded services
Con­trol Win­dows fea­tures inc anti­vir­us, mes­sen­ger, error report­ing, cd-bruning
Media Play­er — dis­able auto­mat­ic actions
Java settings
Adobe settings
Auda­city settings
Smart­Board settings
Win­dows Defend­er settings
Inter­net Explorer settings
Screen Saver settings

[xml];;;;;;;;;;;;;
CLASS MACHINE
;;;;;;;;;;;;;

CATEGORY “Tech­ni­cians Settings”
CATEGORY !!EZ_GPO
POLICY !!BASE_CFG
KEYNAME “SoftwarePoliciesTerraNovumEZ_GPO”
EXPLAIN !!BASE_CFG_EXP
PART “Power Man­age­ment Set­tings Schema” DROPDOWNLIST REQUIRED
VALUENAME “Set­tingsS­cheme”
ITEMLIST
NAME !!Set­tingsS­chemeS­im­pleIn­dex VALUE “Simple” Default
END ITEMLIST
END PART
PART “Power Man­age­ment Set­tings Schema Major Ver­sion” NUMERIC REQUIRED
VALUENAME “MajorVer­sion”
DEFAULT 2
MIN 1
MAX 100
END PART
PART “Power Man­age­ment Set­tings Schema Minor Ver­sion” NUMERIC REQUIRED
VALUENAME “MinorVer­sion”
DEFAULT 0
MIN 0
MAX 99
END PART
PART “Con­trol Vari­able [Do Not Modi­fy]” DROPDOWNLIST REQUIRED
VALUENAME “Con­trol”
ITEMLIST
NAME “Con­trol Vari­able [Do Not Modi­fy]” VALUE “Veri­fy” Default
END ITEMLIST
END PART
END POLICY
POLICY !!OPTIONS
KEYNAME “SoftwarePoliciesTerraNovumEZ_GPOOptions”
EXPLAIN !!OPTIONS_EXP
PART “Force Standby to Be Set on All Machines” CHECKBOX
VALUENAME “ForceSt­andby”
VALUEON NUMERIC 1 ;Force Standby flag
VALUEOFF NUMERIC 0
END PART
END POLICY
POLICY !!SETTINGS_SCHEME_SIMPLE
KEYNAME “SoftwarePoliciesTerraNovumEZ_GPOSimple”
EXPLAIN !!SETTINGS_SCHEME_SIMPLE_EXP
PART “AC No User Mon­it­or Timeout” NUMERIC REQUIRED
VALUENAME “ACUser­MonId­le­Time”
DEFAULT 10
MIN 0
MAX 300
END PART
PART “AC No User Sys­tem Standby Timeout” NUMERIC REQUIRED
VALUENAME “ACUser­Stand­By­Id­le­Time”
DEFAULT 15
MIN 0
MAX 300
END PART
PART “AC No User Hibern­ate Timeout” NUMERIC REQUIRED
VALUENAME “ACMach­Hibern­ateIdle­Time”
DEFAULT 30
MIN 0
MAX 300
END PART
PART “DC No User Mon­it­or Timeout” NUMERIC REQUIRED
VALUENAME “DCUser­MonId­le­Time”
DEFAULT 2
MIN 0
MAX 300
END PART
PART “DC No User Sys­tem Standby Timeout” NUMERIC REQUIRED
VALUENAME “DCUser­Stand­By­Id­le­Time”
DEFAULT 5
MIN 0
MAX 300
END PART
PART “DC No User Hibern­ate Timeout” NUMERIC REQUIRED
VALUENAME “DCMach­Hibern­ateIdle­Time”
DEFAULT 10
MIN 0
MAX 300
END PART
END POLICY
END CATEGORY ; EZ_GPO
CATEGORY “Hard­ware”
POLICY “Touch­pad Sens­it­iv­ity Fix”
KEYNAME “SOFT­WARE­Syn­aptic­sSyn­T­P­De­faults”
VALUENAME “AutoRe­cal­ib­ra­tion”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
CATEGORY “Star­tup”
;not fully managed
POLICY “Dis­able Star­tup Programs”
KEYNAME “SOFT­WARE­Mi­crosoftWin­dowsCur­rentVer­sion­Run”
PART “D‑Link Wire­less Tray” CHECKBOX
VALUENAME “D‑Link Air­Plus G”
VALUEON DELETE
VALUEOFF “%ProgramFiles%D‑LinkAirPlus GAirGCFG.exe”
END PART
PART “D‑Link Wire­less Con­fig Util” CHECKBOX
VALUENAME “ANIWZCS2Service”
VALUEON DELETE
VALUEOFF “%ProgramFiles%ANIANIWZCS2 ServiceWZCSLDR2.exe”
END PART
PART “Install­shield Updates” CHECKBOX
VALUENAME “ISUSPM Startup”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Common FilesInstallShieldUpdateServiceisuspm.exe ‑star­tup”
END PART
PART “Install­shield Updates Sched­uler” CHECKBOX
VALUENAME “ISUSSched­uler”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Common FilesInstallShieldUpdateServiceissch.exe ‑start”
END PART
PART “Syn­chron­iz­a­tion Man­ager” CHECKBOX
VALUENAME “Syn­chron­iz­a­tion Manager”
VALUEON DELETE
VALUEOFF “%SystemRoot%system32mobsync.exe /logon”
END PART
PART “Belkin Wire­less Tray” CHECKBOX
VALUENAME “wltray.exe”
VALUEON DELETE
VALUEOFF “%SystemRoot%System32wltray.exe”
END PART
PART “Logit­ech Soft­ware Update” CHECKBOX
VALUENAME “Logit­ech­Soft­wareUp­date”
VALUEON DELETE
VALUEOFF “%ProgramFiles%LogitechVideoManifestEngine.exe”
END PART
PART “Logit­ech Cam­era Check­er” CHECKBOX
VALUENAME “Logit­echVideoR­e­pair”
VALUEON DELETE
VALUEOFF “%ProgramFiles%LogitechVideoISStart.exe”
END PART
PART “Logit­ech Cam­era Tray” CHECKBOX
VALUENAME “Logit­echVideo­Tray”
VALUEON DELETE
VALUEOFF “%ProgramFiles%LogitechVideoLogiTray.exe”
END PART
PART “Logit­ech Cam­era Util­ity” CHECKBOX
VALUENAME “LVCOMSX”
VALUEON DELETE
VALUEOFF “%SystemRoot%LVCOMSX.exe”
END PART
PART “Norton Ghost” CHECKBOX
VALUENAME “NGCli­ent”
VALUEON DELETE
VALUEOFF “%ProgramFiles%SymantecGhostngctw32.exe”
END PART
PART “Java Update” CHECKBOX
VALUENAME “Sun­JavaUp­dateS­ched”
VALUEON DELETE
VALUEOFF “jusched.exe”
END PART
PART “Nero” CHECKBOX
VALUENAME “Ner­oCheck”
VALUEON DELETE
VALUEOFF “%SystemRoot%NeroCheck.exe”
END PART
PART “Nero #2” CHECKBOX
VALUENAME “Ner­o­Fil­ter­Check”
VALUEON DELETE
VALUEOFF “%SystemRoot%NeroCheck.exe”
END PART
PART “In CD” CHECKBOX
VALUENAME “InCD”
VALUEON DELETE
VALUEOFF “%ProgramFiles%AheadInCDInCD.exe”
END PART
PART “Quick­time” CHECKBOX
VALUENAME “Quick­Time Task”
VALUEON DELETE
VALUEOFF “qttask.exe”
END PART
PART “Intel Vga Tray Icon” CHECKBOX
VALUENAME “Igfx­Tray”
VALUEON DELETE
VALUEOFF “%SystemRoot%igfxtray.exe”
END PART
PART “Intel Vga Tray #1” CHECKBOX
VALUENAME “Per­sist­ence”
VALUEON DELETE
VALUEOFF “%SystemRoot%igfxpers.exe”
END PART
PART “Intel VGA Tray #2″ CHECKBOX
VALUENAME “igfx­pers”
VALUEON DELETE
VALUEOFF “%SystemRoot%igfxpers.exe”
END PART
PART “Intel Hotkeys” CHECKBOX
VALUENAME “HotKey­sCm­ds”
VALUEON DELETE
VALUEOFF “%SystemRoot%hkcmd.exe”
END PART
PART “Intel HotKeys #2” CHECKBOX
VALUENAME “igfx­hk­cmd”
VALUEON DELETE
VALUEOFF “%SystemRoot%hkcmd.exe”
END PART
PART “Intel Audio Stu­dio” CHECKBOX
VALUENAME “IntelAu­di­oStu­dio”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Intel Audio StudioIntelAudioStudio.exe TRAY”
END PART
PART “nVidia Con­trol Pan­el” CHECKBOX
VALUENAME “NvCplDae­mon”
VALUEON DELETE
VALUEOFF “RUNDLL32.EXE %SystemRoot%NvCpl.dll,NvStartup”
END PART
PART “nVidia Media Cen­ter” CHECKBOX
VALUENAME “NvMe­di­a­Cen­ter”
VALUEON DELETE
VALUEOFF “RUNDLL32.EXE %SystemRoot%NvMcTray.dll,NvTaskbarInit”
END PART
PART “nVidia Wiz­ard” CHECKBOX
VALUENAME “nwiz”
VALUEON DELETE
VALUEOFF “nwiz.exe /install”
END PART
PART “Power­D­VD Remote Con­trol” CHECKBOX
VALUENAME “Remote Control”
VALUEON DELETE
VALUEOFF “%ProgramFiles%CyberLinkPowerDVDPDVDServ.exe”
END PART
PART “Power­D­VD Remote Con­trol 2” CHECKBOX
VALUENAME “Remote­Con­trol”
VALUEON DELETE
VALUEOFF “%ProgramFiles%CyberLinkPowerDVDPDVDServ.exe”
END PART
PART “Power­D­VD Lan­guage” CHECKBOX
VALUENAME “Lan­guageShort­cut”
VALUEON DELETE
VALUEOFF “%ProgramFiles%CyberLinkPowerDVDLanguageLanguage.exe”
END PART
PART “Real­tek Input Pop-Up” CHECKBOX
VALUENAME “High Defin­i­tion Audio Prop­erty Page Shortcut”
VALUEON DELETE
VALUEOFF “HDAShCut.exe”
END PART
PART “Sounds Man­ager” CHECKBOX
VALUENAME “Sound­Man”
VALUEON DELETE
VALUEOFF “Soundman.exe”
END PART
PART “Real­tek Audio Util­ity” CHECKBOX
VALUENAME “Alcmtr”
VALUEON DELETE
VALUEOFF “ALCMTR.EXE”
END PART
PART “Real­tek HD Audio Con­trol Pan­el” CHECKBOX
VALUENAME “RTHDCPL”
VALUEON DELETE
VALUEOFF “RTHDCPL.EXE”
END PART
PART “Reak­tek Audio Device Detec­tion” CHECKBOX
VALUENAME “AlcWzrd”
VALUEON DELETE
VALUEOFF “ALCWZRD.EXE”
END PART
PART “Real­tek Voice Man­ager” CHECKBOX
VALUENAME “SkyTel”
VALUEON DELETE
VALUEOFF “SkyTel.exe”
END PART
PART “Sound­Max Tray” CHECKBOX
VALUENAME “Sound­Max­PnP”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Analog DevicesCoresmax4pnp.exe”
END PART
PART “IDT Audio Tray” CHECKBOX
VALUENAME “SysTrayApp”
VALUEON DELETE
VALUEOFF “%ProgramFiles%IDTWDMsttray.exe”
END PART
PART “Acer Key­board Util­ity” CHECKBOX
VALUENAME “HCon­trol”
VALUEON DELETE
VALUEOFF “%SystemDrive%WINDOWSATK0100HControl.exe”
END PART
PART “Soft­mo­dem Help­er” CHECKBOX
VALUENAME “SMSERIAL”
VALUEON DELETE
VALUEOFF “%SystemDrive%WINDOWSsm56hlpr.exe”
END PART
PART “Soft­mo­dem Util­ity” CHECKBOX
VALUENAME “AGRSMMSG”
VALUEON DELETE
VALUEOFF “AGRSMMSG.exe”
END PART
PART “Syn­aptics Touch­pad Enhance­ment” CHECKBOX
VALUENAME “Syn­T­PEnh”
VALUEON DELETE
VALUEOFF “%ProgramFiles%SynapticsSynTPEnh.exe”
END PART
PART “Syn­aptics Touch­pad Enhance­ment #2” CHECKBOX
VALUENAME “Syn­T­P­Start”
VALUEON DELETE
VALUEOFF “%ProgramFiles%SynapticsSynTPStart.exe”
END PART
PART “Alps Touch­Pad Tray” CHECKBOX
VALUENAME “Apoint”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Apoint2kApoint.exe”
END PART
PART “Adobe Read­er Speed Launch­er” CHECKBOX
VALUENAME “Adobe Read­er Speed Launcher”
VALUEON DELETE
VALUEOFF “%ProgramFiles%AdobeReader 8.0ReaderReader_sl.exe”
END PART
PART “Adobe Photo Down­load­er” CHECKBOX
VALUENAME “Adobe Photo Downloader”
VALUEON DELETE
VALUEOFF “%ProgramFiles%AdobePhotoshop Ele­ments 5.0apdproxy.exe”
END PART
PART “HP Soft­ware Update” CHECKBOX
VALUENAME “HP Soft­ware Update”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Hewlett-PackardHP Soft­ware UpdateHPWuSchd2.exe”
END PART
PART “Olym­pus Cam­era Soft­ware” CHECKBOX
VALUENAME “OM_Monitor”
VALUEON DELETE
VALUEOFF “%ProgramFiles%OLYMPUSOLYMPUS MasterFirstStart.exe”
END PART
PART “Intel­li­Point” CHECKBOX
VALUENAME “Intel­li­Point”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Microsoft IntelliPointipoint.exe”
END PART
PART “Rox­io Drag-to-Disc” CHECKBOX
VALUENAME “Rox­i­oDrag­ToDisc”
VALUEON DELETE
VALUEOFF “%ProgramFiles%RoxioEasy CD Cre­at­or 6DragToDiscDrgToDsc.exe”
END PART
PART “Rox­io Engine Util­ity” CHECKBOX
VALUENAME “Rox­ioEn­gineUt­il­ity”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Common FilesRox­io SharedSystemEngUtil.exe”
END PART
PART “S3 Video Driver Help­er” CHECKBOX
VALUENAME “VTTimer”
VALUEON DELETE
VALUEOFF “VTTimer.exe”
END PART
PART “S3 Video Driver Tray Icon” CHECKBOX
VALUENAME “VTtrayp”
VALUEON DELETE
VALUEOFF “VTtrayp.exe”
END PART
PART “HP Quick­Launch But­tons Tray” CHECKBOX
VALUENAME “QlbCtrl”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Hewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe /Start”
END PART
PART “PCTel Modem Util­ity” CHECKBOX
VALUENAME “PCTVOICE”
VALUEON DELETE
VALUEOFF “pctspk.exe”
END PART
END POLICY
;not fully managed
POLICY “Sys­tem Services”
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vices”
PART “CD Burn­ing Ser­vice” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vices­Imapi”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Smart Board Ser­vice” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vi­cesS­MART Board Service”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Smart Board Web Serv­er” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vi­cesS­MART Web Server”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Mes­sen­ger” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vicesMes­sen­ger”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4” DEFAULT
NAME “Manu­al” VALUE NUMERIC “3”
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Remote Registry” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vices­RemoteRegistry”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3”
NAME “Auto­mat­ic” VALUE NUMERIC “2” DEFAULT
END ITEMLIST
END PART
PART “Uni­ver­sal PnP” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vice­supn­phost”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Admin Alerts” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vice­sAlert­er”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4” DEFAULT
NAME “Manu­al” VALUE NUMERIC “3”
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Clip­board Serv­er” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vicesClipSrv”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4” DEFAULT
NAME “Manu­al” VALUE NUMERIC “3”
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Index­ing Ser­vice” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vices­CiS­vc”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “nVidia Driver Help­er Ser­vice” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vices­NVS­vc”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Per­form­ance Logs and Alerts” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vi­cesSys­mon­Log”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Remote Assist­ance” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vices­RD­Sess­Mgr”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “Tel­net” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vicesTl­ntS­vr”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4” DEFAULT
NAME “Manu­al” VALUE NUMERIC “3”
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
PART “UPS” DROPDOWNLIST NOSORT
KEYNAME “SYS­TEM­Cur­rent­Con­trol­Set­Ser­vice­sUPS”
VALUENAME “Start”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “4”
NAME “Manu­al” VALUE NUMERIC “3” DEFAULT
NAME “Auto­mat­ic” VALUE NUMERIC “2”
END ITEMLIST
END PART
END POLICY
END CATEGORY
CATEGORY “Win­dows Features”
POLICY “Overide Anti­vir­us Monitoring”
KEYNAME “SOFT­WARE­Mi­crosoft­Se­cur­ity Center”
VALUENAME “Anti­Vir­usOv­er­ride”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY “Dis­able Win­dows Error Reporting”
KEYNAME “SOFT­WARE­Mi­crosoft­PCHealthEr­ror­Re­port­ing”
VALUENAME DoReport
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
POLICY “Pre­vent Win­dows Mes­sen­ger from Running”
KEYNAME “SOFT­WARE­Mi­crosoft­Mes­sen­ger­Cli­ent”
VALUENAME “Pre­ventRun”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY “Enable CD—Burn­ing for all Users”
KEYNAME “Soft­ware­Mi­crosoftWin­dows NTCurrentVersionWinlogon”
VALUENAME “Alloc­ate­DASD”
VALUEON NUMERIC 2
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
CATEGORY “Win­dows Media Player”
POLICY “Dis­able Auto­mat­ic Update”
KEYNAME “SOFT­WARE­Mi­crosoftWin­dowsMe­diaPlay­er”
VALUENAME “Dis­ableAu­toUp­date”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY “Dis­able Auto­mat­ic Upgrade”
KEYNAME “SOFT­WARE­Mi­crosoftWin­dowsMe­diaPlay­er”
VALUENAME “EnableAu­toUp­grade”
VALUEON “No”
VALUEOFF “Yes”
END POLICY
END CATEGORY
CATEGORY “Java”
POLICY “Plu­gin”
KEYNAME “SOFT­WARE­Jav­aS­oft­Java Plug-in1.6.0_01”
VALUENAME “HideSys­tem­TrayIcon”
VALUEON NUMERIC “1”
VALUEOFF NUMERIC “0”
ACTIONLISTON
KEYNAME “SOFT­WARE­Jav­aS­oft­Java Plug-in1.6.0_02”
VALUENAME “HideSys­tem­TrayIcon” VALUE NUMERIC 1
KEYNAME “SOFT­WARE­Jav­aS­oft­Java Plug-in1.6.0_03”
VALUENAME “HideSys­tem­TrayIcon” VALUE NUMERIC 1
END ACTIONLISTON
ACTIONLISTOFF
KEYNAME “SOFT­WARE­Jav­aS­oft­Java Plug-in1.6.0_02”
VALUENAME “HideSys­tem­TrayIcon” VALUE NUMERIC 0
KEYNAME “SOFT­WARE­Jav­aS­oft­Java Plug-in1.6.0_03”
VALUENAME “HideSys­tem­TrayIcon” VALUE NUMERIC 0
END ACTIONLISTOFF
END POLICY
POLICY “Update”
KEYNAME “SOFT­WARE­Jav­aS­oft­Java UpdatePolicy”
PART “Dis­able Update” CHECKBOX
VALUENAME “Enable­JavaUp­date”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Dis­able Auto Update” CHECKBOX
VALUENAME “EnableAu­toUp­dat­eCheck”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Don’t Noti­fy on Down­load” CHECKBOX
VALUENAME “Noti­fy­Down­load”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Don’t Noti­fy on Install” CHECKBOX
VALUENAME “Noti­fy­In­stall”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Don’t Prompt for AutoUp­date” CHECKBOX
VALUENAME “PromptAu­toUp­dat­eCheck”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
END POLICY
END CATEGORY
CATEGORY “Adobe”
POLICY “Adobe Updater”
KEYNAME “Soft­wareAdobeUp­dater”
PART “Dis­able” CHECKBOX
VALUENAME “Enter­prise”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
END POLICY
POLICY “Read­er EULA”
KEYNAME “SOFT­WAREAdo­beAc­robat Reader8.0AdobeViewer”
VALUENAME “Accept EULA” VALUEON NUMERIC 1
ACTIONLISTON
VALUENAME “Launched”
VALUE NUMERIC 1
END ACTIONLISTON
ACTIONLISTOFF
VALUENAME “Launched”
VALUE NUMERIC 0
END ACTIONLISTOFF
END POLICY
POLICY “Read­er Features”
KEYNAME “SOFT­WAREAdo­beAc­robat Reader8.0FeatureLockdown”
PART “Dis­able Updater” CHECKBOX
VALUENAME “bUp­dater”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Dis­able E‑Book Menu” CHECKBOX
VALUENAME “bShowEbook­Menu”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Dis­able Pur­chase” CHECKBOX
VALUENAME “bPur­chaseAcro”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Dis­able Cre­ate PDF Online” CHECKBOX
VALUENAME “bCre­ateP­D­FOn­line”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Dis­able Browser Integ­ra­tion” CHECKBOX
VALUENAME “bBrowser­In­teg­ra­tion”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
PART “Dis­able Send to Fed­Ex Kinko’s” CHECKBOX
VALUENAME “bFe­d­Ex­In­ter­net­Print­ing”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”

END PART
END POLICY
POLICY “Pho­toshop Elements”
KEYNAME “SoftwareMicrosoftWindowsCurrentVersionUninstall{A7B609FB-83D8-4FC3-8477–1BC65ECFE85B}”
PART “EULA Accep­ted” CHECKBOX
VALUENAME “epic_eula_accepted”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
PART “EULA Accep­ted Time” CHECKBOX
VALUENAME “epic_eula_accepted_time”
VALUEON “2006−11−01 10:00”
END PART
PART “EULA Selec­ted” CHECKBOX
VALUENAME “epic_eula_selected”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END PART
PART “Loc­ale” CHECKBOX
VALUENAME “epic_eula_selected_locale”
VALUEON “en_us”
END PART
PART “Regis­tra­tion” CHECKBOX
VALUENAME “EPIC_REGS_COUNT”
VALUEON NUMERIC 4
VALUEOFF NUMERIC 0
END PART
PART “Regis­tra­tion Date” CHECKBOX
VALUENAME “EPIC_REGS_DATE”
VALUEON “2006−11−01 10:00”
END PART
PART “Regis­tra­tion Declined” CHECKBOX
VALUENAME “EPIC_REGS_DECLINE_COUNT”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END PART
PART “Regis­tra­tion State” CHECKBOX
VALUENAME “EPIC_REGS_STATE”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
PART “Regis­tra­tion Type” CHECKBOX
VALUENAME “EPIC_REGS_TYPE”
VALUEON NUMERIC 4
VALUEOFF NUMERIC 0
END PART
END POLICY
POLICY “Première Elements”
KEYNAME “SoftwareMicrosoftWindowsCurrentVersionUninstall{530AFAFF-6F0A-48BB-88D0-04F9658322D3}”
PART “EULA Accep­ted” CHECKBOX
VALUENAME “epic_eula_accepted”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
PART “EULA Accep­ted Time” CHECKBOX
VALUENAME “epic_eula_accepted_time”
VALUEON “2006−11−01 10:00”
END PART
PART “EULA Selec­ted” CHECKBOX
VALUENAME “epic_eula_selected”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END PART
PART “Loc­ale” CHECKBOX
VALUENAME “epic_eula_selected_locale”
VALUEON “en_us”
END PART
PART “Regis­tra­tion” CHECKBOX
VALUENAME “EPIC_REGS_COUNT”
VALUEON NUMERIC 4
VALUEOFF NUMERIC 0
END PART
PART “Regis­tra­tion Date” CHECKBOX
VALUENAME “EPIC_REGS_DATE”
VALUEON “2006−11−01 10:00”
END PART
PART “Regis­tra­tion Declined” CHECKBOX
VALUENAME “EPIC_REGS_DECLINE_COUNT”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END PART
PART “Regis­tra­tion State” CHECKBOX
VALUENAME “EPIC_REGS_STATE”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END PART
PART “Regis­tra­tion Type” CHECKBOX
VALUENAME “EPIC_REGS_TYPE”
VALUEON NUMERIC 4
VALUEOFF NUMERIC 0
END PART
END POLICY
END CATEGORY
CATEGORY “Auda­city”
POLICY “Lame”
KEYNAME “SOFTWAREAudacityAudacityMP3”
PART “Lame Path” EDITTEXT
VALUENAME “MP3LibPath”
DEFAULT “%ProgramFiles%Audacitylame_enc.dll”
EXPANDABLETEXT
END PART
END POLICY
POLICY “Lan­guage”
KEYNAME “SOFT­WAR­EAu­da­cityAu­da­city­Loc­ale”
PART “Auda­city Lan­guage” DROPDOWNLIST
VALUENAME “Lan­guage”
ITEMLIST
NAME “Eng­lish” VALUE “en”
END ITEMLIST
END PART
END POLICY
END CATEGORY
CATEGORY “Smart­Board”
POLICY “Dis­able Com-Port Prompt”
KEYNAME “Soft­wareS­MART Tech­no­lo­gies Inc.SMART Board Soft­ware­Board Tools”
VALUENAME “noboard”
VALUEON NUMERIC 1
VALUEOFF DELETE
END POLICY
POLICY “Gal­lery”
KEYNAME “Soft­wareS­MART Tech­no­lo­gies Inc.Gallery”
PART “Net­work Path” EDITTEXT
VALUENAME “Default­Mani­fest”
DEFAULT “\gatewayglobalsmartimsmanifest.xml”
EXPANDABLETEXT
END PART
END POLICY
END CATEGORY
CATEGORY “Dazzle 03”
POLICY “Dis­able Save To Web Intro”
KEYNAME “Soft­wareIndigo LearningDazzle03”
VALUENAME “ShowSaveToWebIn­tro”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
END CATEGORY
CATEGORY “Win­dows Defender”
POLICY “Set Sched­uled Scans”
KEYNAME “SOFT­WARE­Mi­crosoftWin­dows DefenderScan”
PART “Sched­uled Day” DROPDOWNLIST NOSORT
VALUENAME “Sched­uleDay”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “8”
NAME “Monday” VALUE NUMERIC “2”
NAME “Tues­day” VALUE NUMERIC “3”
NAME “Wed­nes­day” VALUE NUMERIC “4”
NAME “Thursday” VALUE NUMERIC “5”
NAME “Fri­day” VALUE NUMERIC “6”
NAME “Sat­urday” VALUE NUMERIC “7”
NAME “Sunday” VALUE NUMERIC “1”
END ITEMLIST
END PART
PART “Sched­uled Time” NUMERIC
VALUENAME “Sched­u­le­Time”
MIN 0
MAX 1440
SPIN 30
DEFAULT 0
END PART
PART “Scan Type” DROPDOWNLIST
VALUENAME “Scan­Para­met­ers”
ITEMLIST
NAME “Quick Scan” VALUE NUMERIC “1”
NAME “Full Scan” VALUE NUMERIC “2”
END ITEMLIST
END PART
END POLICY
POLICY !!Dis­ableAntiSpy­ware
KEYNAME “Soft­ware­Mi­crosoftWin­dows Defender”
EXPLAIN !!DisableAntiSpyware_Explain
VALUENAME “Dis­ableAntiSpy­ware”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!Dis­ableUn­known­RTP
KEYNAME “Soft­ware­Mi­crosoftWin­dows Defend­er­Real-Time Protection”
EXPLAIN !!DisableUnknownRTP_Explain
VALUENAME “EnableUn­known­Prompts”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!Check­For­Sig­na­tures­Be­fore­Run­ning­Scan
KEYNAME “Soft­ware­Mi­crosoftWin­dows DefenderScan”
EXPLAIN !!CheckForSignaturesBeforeRunningScan_Explain
VALUENAME “Check­For­Sig­na­tures­Be­fore­Run­ning­Scan”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!Force­Ful­lUp­date
KEYNAME “Soft­ware­Mi­crosoftWin­dows Defend­er­Sig­na­ture Updates”
EXPLAIN !!ForceFullUpdate_Explain
VALUENAME “Force­Ful­lUp­date”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY !!EnableL­og­ging­ForKnown­Good
KEYNAME “Soft­ware­Mi­crosoftWin­dows DefenderReporting”
EXPLAIN !!EnableLoggingForKnownGood_Explain
VALUENAME “Dis­ableL­og­ging­ForKnown­Good”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
POLICY !!EnableL­og­ging­ForUn­known
KEYNAME “Soft­ware­Mi­crosoftWin­dows DefenderReporting”
EXPLAIN !!EnableLoggingForUnknown_Explain
VALUENAME “Dis­ableL­og­ging­ForUn­known”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
POLICY !!SpyNet­Re­port­ing
KEYNAME “Soft­ware­Mi­crosoftWin­dows DefenderSpyNet”
EXPLAIN !!SpyNetReporting_Explain
PART !!SpyNetReporting_DropDownList DROPDOWNLIST REQUIRED
VALUENAME “SpyNet­Re­port­ing”
ITEMLIST
NAME !!SpyNetReporting_DropDownList_Disabled VALUE NUMERIC 0
NAME !!SpyNetReporting_DropDownList_Basic VALUE NUMERIC 1
NAME !!SpyNetReporting_DropDownList_Advanced VALUE NUMERIC 2
END ITEMLIST
END PART
END POLICY
POLICY !!Check­Al­tern­ate­Down­load­Loca­tion
KEYNAME “Soft­ware­Mi­crosoftWin­dows Defend­er­Sig­na­ture Updates”
EXPLAIN !!CheckAlternateDownloadLocation_Explain
VALUENAME “Check­Al­tern­ate­Down­load­Loca­tion”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
END CATEGORY
END CATEGORY

;;;;;;;;;;
CLASS USER
;;;;;;;;;;

CATEGORY “Tech­ni­cian Settings”
CATEGORY “Cook­ies”
POLICY “Allow cook­ies on enable website”
KEYNAME “Soft­ware­Mi­crosoftWin­dowsCur­rentVer­sion­In­ter­net SettingsP3PHistoryenable-online.com”
VALUENAME “”
VALUEON NUMERIC 1
VALUEOFF DELETE
END POLICY
END CATEGORY
CATEGORY “Smart­Board”
POLICY “Dis­able Com-Port Prompt”
KEYNAME “Soft­wareS­MART Tech­no­lo­gies Inc.SMART Board Soft­ware­Board Tools”
VALUENAME “noboard”
VALUEON NUMERIC 1
VALUEOFF DELETE
END POLICY
POLICY “Gal­lery”
KEYNAME “Soft­wareS­MART Tech­no­lo­gies Inc.Gallery”
PART “Net­work Path” EDITTEXT
VALUENAME “Default­Mani­fest”
DEFAULT “\gate­way­g­lob­als­martS­MART Essen­tials For Edu­cat­orsGal­lery Data Filesgallery_categories.xml”
EXPANDABLETEXT
END PART
END POLICY
END CATEGORY
CATEGORY “Star­tup Programs”
;not fully managed
POLICY “Dis­able Star­tup Programs”
KEYNAME “SOFT­WARE­Mi­crosoftWin­dowsCur­rentVer­sion­Run”
PART “Office Lan­guage Tools” CHECKBOX
VALUENAME “ctf­mon”
VALUEON DELETE
VALUEOFF “%SystemRoot%ctfmon.exe”
END PART
PART “Office Lan­guage Tools 2” CHECKBOX
VALUENAME “CTFMON.EXE”
VALUEON DELETE
VALUEOFF “%SystemRoot%ctfmon.exe”
END PART
PART “Msn Mes­sen­ger” CHECKBOX
VALUENAME “MsnMs­gr”
VALUEON DELETE
VALUEOFF “%Pro­gram­Files%MSN Messengermsnmsgr.exe /background”
END PART
PART “Win­dows Mes­sen­ger” CHECKBOX
VALUENAME “msmsgs”
VALUEON DELETE
VALUEOFF “%ProgramFiles%Messengermsmsgs.exe /background”
END PART
END POLICY
END CATEGORY
CATEGORY “IE7 Settings”
POLICY “Always show Menubar”
KEYNAME “Soft­ware­Mi­crosoftIn­t­er­net ExplorerMain”
VALUENAME “AlwaysShow­Menus”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY “Set Menubar to Top Position”
KEYNAME “Soft­ware­Mi­crosoftIn­t­er­net ExplorerToolbarWebBrowser”
VALUENAME “ITBar7Position”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY “Set Google as Default Search”
KEYNAME “Soft­ware­Mi­crosoftIn­t­er­net ExplorerSearchScopes”
VALUENAME “Default­Scope” VALUEON {2D16E5B6-2F07-4341–934E-118468986E78}
ACTIONLISTON
VALUENAME “Ver­sion” VALUE NUMERIC 1
KEYNAME “Soft­ware­Mi­crosoftIn­t­er­net ExplorerSearchScopes{2D16E5B6-2F07-4341–934E-118468986E78}”
VALUENAME “Dis­play­Name” VALUE “Google”
VALUENAME “URL” VALUE “https://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}”
END ACTIONLISTON
END POLICY
POLICY “Dis­able First Run Wizard”
KEYNAME “Soft­ware­Mi­crosoftIn­t­er­net ExplorerMain”
VALUENAME “Dis­able­FirstRun­Custom­ize”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY “Dis­able Phish­ing Filter”
KEYNAME “Soft­ware­Mi­crosoftIn­t­er­net ExplorerPhishingFilter”
VALUENAME “Enabled”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
POLICY “Turn Off Lan­guage Bar on Startup”
KEYNAME “Soft­ware­Mi­crosoftCTF”
VALUENAME “Dis­able Thread Input Man­ager” VALUEON NUMERIC 1
ACTIONLISTON
VALUENAME “ExtraIcon­sOn­Min­im­ized” VALUE NUMERIC 0
KEYNAME “SOFT­WARE­Mi­crosoftIn­t­er­net ExplorerInternational”
VALUENAME “AcceptLan­guage” VALUE “en-gb”
KEYNAME “Soft­ware­Mi­crosoftCT­FM­SUTB”
VALUENAME “ShowDeskBand” VALUE NUMERIC 1
KEYNAME “Soft­ware­Mi­crosoftCT­FLang­Bar”
VALUENAME “ShowStatus” VALUE NUMERIC 3
END ACTIONLISTON
END POLICY
POLICY “Turn off Lan­guage Bar on Star­tup (part 2)”
KEYNAME “Key­board LayoutPreload”
VALUENAME “2” VALUEON DELETE
ACTIONLISTON
VALUENAME “ShowStatus” VALUE NUMERIC 2
KEYNAME “SoftwareClassesCLSID{540D8A8B-1C3F-4E32-8132–530F6A502090}”
VALUENAME “Men­u­Tex­t­PUI” VALUE DELETE
END ACTIONLISTON
END POLICY
POLICY “Dis­able Cus­tom­er Improve­ment Program”
KEYNAME “Soft­ware­Mi­crosoftIn­t­er­net ExplorerSQM”
VALUENAME “Dis­able­Cus­tomer­Im­prove­ment­Pro­gram”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
CATEGORY “Adobe Read­er 8”
POLICY “Show a taskbar icon for each document”
KEYNAME “Soft­wareAdo­beAc­robat Reader8.0AVGeneral”
VALUENAME “bDoc­u­mentsInTaskbar”
VALUEON “1”
VALUEOFF DELETE
END POLICY
POLICY “Bey­ond Acrobat”
KEYNAME “Soft­wareAdo­beAc­robat Reader8.0Downtown”
PART “Don’t show at launch” CHECKBOX
VALUENAME “bDont­ShowAt­Launch”
VALUEON NUMERIC “1”
VALUEOFF NUMERIC “0”
END PART
PART “Don’t Go online” CHECKBOX
VALUENAME “bGoOn­line”
VALUEON NUMERIC “0”
VALUEOFF NUMERIC “1”
END PART
END POLICY
END CATEGORY
CATEGORY “Win­dows Defender”
POLICY “Set Sched­uled Scans”
KEYNAME “SOFT­WARE­Mi­crosoftWin­dows DefenderScan”
PART “Sched­uled Day” DROPDOWNLIST NOSORT
VALUENAME “Sched­uleDay”
ITEMLIST
NAME “Dis­abled” VALUE NUMERIC “8”
NAME “Monday” VALUE NUMERIC “2”
NAME “Tues­day” VALUE NUMERIC “3”
NAME “Wed­nes­day” VALUE NUMERIC “4”
NAME “Thursday” VALUE NUMERIC “5”
NAME “Fri­day” VALUE NUMERIC “6”
NAME “Sat­urday” VALUE NUMERIC “7”
NAME “Sunday” VALUE NUMERIC “1”
END ITEMLIST
END PART
PART “Sched­uled Time” NUMERIC
VALUENAME “Sched­u­le­Time”
MIN 0
MAX 1440
SPIN 30
DEFAULT 0
END PART
PART “Scan Type” DROPDOWNLIST
VALUENAME “Scan­Para­met­ers”
ITEMLIST
NAME “Quick Scan” VALUE NUMERIC “1”
NAME “Full Scan” VALUE NUMERIC “2”
END ITEMLIST
END PART
END POLICY
POLICY “Dis­able Non-Admin Access”
KEYNAME “SOFT­WARE­Mi­crosoftWin­dows Defen­d­er­UX Configuration”
VALUENAME “AllowNon­Ad­min­Func­tion­al­ity”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
END CATEGORY
CATEGORY “ScreenSaver”
;not fully managed
POLICY “ScreenSaver Settings”
KEYNAME “Con­trol PanelDesktop”
PART “Screensaver Time” NUMERIC
VALUENAME “ScreenSave­TimeOut”
MIN 1
MAX 120
DEFAULT 10
END PART
PART “Set Screensaver” DROPDOWNLIST NOSORT
VALUENAME “SCRNSAVE.EXE”
ITEMLIST
NAME “Default” VALUE “%SystemRoot%scrnsave.scr”
NAME “3D Fly­ing Objects” VALUE “%SystemRoot%ss3dfo.scr”
NAME “3D Text” VALUE “%SystemRoot%sstext3d.scr”
NAME “Logon” VALUE “%SystemRoot%logon.scr”
NAME “Bez­i­er Curves” VALUE “%SystemRoot%ssbezier.scr”
NAME “3D Flower­box” VALUE “%SystemRoot%ssflwbox.scr”
NAME “Mar­quee” VALUE “%SystemRoot%ssmarque.scr”
NAME “My Pic­tures Slideshow” VALUE “%SystemRoot%ssmypics.scr”
NAME “Mys­ti­fy” VALUE “%SystemRoot%ssmyst.scr”
NAME “3D Pipes” VALUE “%SystemRoot%sspipes.scr”
NAME “Fly­ing Stars” VALUE “%SystemRoot%ssstars.scr”
END ITEMLIST
END PART
END POLICY
POLICY “Fly­ing Objects Settings”
KEYNAME “Soft­ware­Mi­crosoftScreensaversFly­ing Objects”
PART “Options” NUMERIC
VALUENAME “Options”
DEFAULT 1
END PART
PART “Type” NUMERIC
VALUENAME “Type”
DEFAULT 6
END PART
PART “Tes­sela­tion” NUMERIC
VALUENAME “Tes­sela­tion”
DEFAULT 200
END PART
PART “Size” NUMERIC
VALUENAME “Size”
DEFAULT 175
END PART
PART “Tex­ture” EDITTEXT
VALUENAME “Tex­ture”
DEFAULT “\serverlogoscr.bmp”
EXPANDABLETEXT
END PART
PART “Tex­ture­FileOff­set” NUMERIC
VALUENAME “Tex­ture­FileOff­set”
DEFAULT 12
END PART
PART “All­Screens­Same” NUMERIC
VALUENAME “All­Screens­Same”
DEFAULT 0
END PART
END POLICY
POLICY “3D Text Settings”
KEYNAME “SoftwareMicrosoftScreensaversText3D”
PART “Rota­tion Speed” NUMERIC
VALUENAME “Rota­tion­Speed”
DEFAULT 10
END PART
PART “Rota­tion Style” NUMERIC
VALUENAME “Rota­tion­Style”
DEFAULT 3
END PART
PART “Size” NUMERIC
VALUENAME “Size”
DEFAULT 5
END PART
PART “Text to Show” EDITTEXT
VALUENAME “Dis­playString”
DEFAULT “Greas­brough”
EXPANDABLETEXT
END PART
PART “Font” EDITTEXT
VALUENAME “Font­Face”
DEFAULT “Agency FB”
EXPANDABLETEXT
END PART
PART “Spec­u­lar” NUMERIC
VALUENAME “Spec­u­lar”
DEFAULT 1
END PART
PART “Sur­face Type” NUMERIC
VALUENAME “Sur­fa­ce­Type”
DEFAULT 1
END PART
END POLICY
END CATEGORY
CATEGORY “Win­dows Features”
POLICY “Don’t hide inact­ive icons”
KEYNAME “Soft­ware­Mi­crosoftWin­dowsCur­rentVer­sion­Ex­plorer”
VALUENAME “EnableAu­to­Tray”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
POLICY “Dis­able Desktop clean-up wizard”
KEYNAME “Soft­ware­Mi­crosoftWin­dowsCur­rentVer­sion­Ex­plorerDesktop­Cleanup­W­iz”
VALUENAME “NoRun”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY “Enable clas­sic con­trol panel”
KEYNAME “Soft­ware­Mi­crosoftWin­dowsCur­rentVer­sion­Ex­plorer”
VALUENAME “For­ce­Clas­sic­Con­trolPan­el”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
POLICY “Don’t high­light newly installed software”
KEYNAME “Soft­ware­Mi­crosoftWin­dowsCur­rentVer­sion­Ex­plorerAd­vanced”
VALUENAME “Start_NotifyNewApps”
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY
POLICY “Enable ClearType”
KEYNAME “Con­trol PanelDesktop”
VALUENAME “FontS­mooth­ing­Type”
VALUEON NUMERIC 2
VALUEOFF NUMERIC 1
END POLICY
POLICY “Dis­able Tour Popup”
KEYNAME “SOFT­WARE­Mi­crosoftWin­dowsCur­rentVer­sionAp­plet­s­Tour”
VALUENAME “Run­Count”
VALUEON NUMERIC 0
VALUEOFF DELETE
END POLICY
END CATEGORY
CATEGORY !!EZ_GPO
POLICY !!BASE_CFG
KEYNAME “SoftwarePoliciesTerraNovumEZ_GPO”
EXPLAIN !!BASE_CFG_EXP
PART “Power Man­age­ment Set­tings Schema” DROPDOWNLIST REQUIRED
VALUENAME “Set­tingsS­cheme”
ITEMLIST
NAME !!Set­tingsS­chemeS­im­pleIn­dex VALUE “Simple” Default
END ITEMLIST
END PART
PART “Power Man­age­ment Set­tings Schema Major Ver­sion” NUMERIC REQUIRED
VALUENAME “MajorVer­sion”
DEFAULT 2
MIN 2
MAX 99
END PART
PART “Power Man­age­ment Set­tings Schema Minor Ver­sion” NUMERIC REQUIRED
VALUENAME “MinorVer­sion”
DEFAULT 0
MIN 0
MAX 99
END PART
PART “Con­trol Vari­able [Do Not Modi­fy]” DROPDOWNLIST REQUIRED
VALUENAME “Con­trol”
ITEMLIST
NAME “Con­trol Vari­able [Do Not Modi­fy]” VALUE “Veri­fy” Default
END ITEMLIST
END PART
END POLICY
POLICY !!OPTIONS
KEYNAME “SoftwarePoliciesTerraNovumEZ_GPOOptions”
EXPLAIN !!OPTIONS_EXP
PART “Secur­ity Over­ride” CHECKBOX
VALUENAME “Secur­ityBy­pass”
VALUEON NUMERIC 1 ;Secur­ity Over­ride flag
VALUEOFF NUMERIC 0
END PART
PART “Force Standby to Be Set on All Machines” CHECKBOX
VALUENAME “ForceSt­andby”
VALUEON NUMERIC 1 ;Force Standby flag
VALUEOFF NUMERIC 0
END PART
END POLICY
POLICY !!SETTINGS_SCHEME_SIMPLE
KEYNAME “SoftwarePoliciesTerraNovumEZ_GPOSimple”
EXPLAIN !!SETTINGS_SCHEME_SIMPLE_EXP
PART “AC User Mon­it­or Timeout” NUMERIC REQUIRED
VALUENAME “ACUser­MonId­le­Time”
DEFAULT 10
MIN 0
MAX 300
END PART
PART “AC User Sys­tem Standby Timeout” NUMERIC REQUIRED
VALUENAME “ACUser­Stand­By­Id­le­Time”
DEFAULT 15
MIN 0
MAX 300
END PART
PART “AC Machine Hibern­ate Timeout” NUMERIC REQUIRED
VALUENAME “ACMach­Hibern­ateIdle­Time”
DEFAULT 30
MIN 0
MAX 300
END PART
PART “DC User Mon­it­or Timeout” NUMERIC REQUIRED
VALUENAME “DCUser­MonId­le­Time”
DEFAULT 5
MIN 0
MAX 300
END PART
PART “DC User Sys­tem Standby Timeout” NUMERIC REQUIRED
VALUENAME “DCUser­Stand­By­Id­le­Time”
DEFAULT 10
MIN 0
MAX 300
END PART
PART “DC Machine Hibern­ate Timeout” NUMERIC REQUIRED
VALUENAME “DCMach­Hibern­ateIdle­Time”
DEFAULT 15
MIN 0
MAX 300
END PART
END POLICY
END CATEGORY ; EZ_GPO
END CATEGORY

[strings]
DisableAntiSpyware=“Turn off Win­dows Defender”
DisableAntiSpyware_Explain=“Turns off Win­dows Defend­er Real-Time Pro­tec­tion, and no more scans are scheduled.nnIf you enable this policy set­ting, Win­dows Defend­er does not run, and com­puters will not be scanned for spy­ware or oth­er poten­tially unwanted software.nnIf you dis­able or do not con­fig­ure this policy set­ting, by default Win­dows Defend­er runs and com­puters are scanned for spy­ware and oth­er poten­tially unwanted software.”
DisableUnknownRTP=“Turn off Real-Time Pro­tec­tion Prompts for Unknown Detection”
DisableUnknownRTP_Explain=“Turns off Real-Time Pro­tec­tion prompts for unknown detection.nnIf you enable this policy set­ting, Win­dows Defend­er does not prompt users to allow or block unknown activity.nnIf you dis­able or do not con­fig­ure this policy set­ting, by default Win­dows Defend­er prompts users to allow or block unknown activ­ity on the computer.”
CheckForSignaturesBeforeRunningScan=“Check for New Sig­na­tures Before Sched­uled Scans”
CheckForSignaturesBeforeRunningScan_Explain=“Checks for new sig­na­tures before run­ning sched­uled scans.nnIf you enable this policy set­ting, the sched­uled scan checks for new sig­na­tures before it scans the computer.nnIf you dis­able or do not con­fig­ure this policy set­ting, the sched­uled scan begins without down­load­ing new signatures.”
ForceFullUpdate=“Download Entire Sig­na­ture Set”
ForceFullUpdate_Explain=“Downloads the full sig­na­ture set, rather than only the sig­na­tures that have been updated since the last sig­na­ture down­load. Down­load­ing the full sig­na­ture set can help troubleshoot prob­lems with sig­na­ture install­a­tions, but because the file is large, it can take longer to down­load. nnIf you enable this policy set­ting, the full sig­na­tures set is downloaded.nnIf you dis­able or do not con­fig­ure this policy set­ting, by default only updated sig­na­tures are downloaded.”
EnableLoggingForKnownGood=“Enable Log­ging Known Good Detections”
EnableLoggingForKnownGood_Explain=“Enables log­ging detec­tion data dur­ing Real-time Pro­tec­tion when Win­dows Defend­er detects known good files. Log­ging detec­tions provides you with detailed inform­a­tion about the pro­grams that run on the com­puters you monitor.nnIf you enable this policy set­ting, known good files are logged.nnIf you dis­able or do not con­fig­ure this policy set­ting, by default known good files are not logged.nnEnabling this policy set­ting can res­ult in a great­er num­ber of events in the log.”
EnableLoggingForUnknown=“Enable Log­ging Unknown Detections”
EnableLoggingForUnknown_Explain=“Enables log­ging detec­tions dur­ing Real-time Pro­tec­tion when Win­dows Defend­er detects unknown files. Log­ging detec­tions provides you with detailed inform­a­tion about the pro­grams that run on the com­puters you monitor.nnIf you enable or do not con­fig­ure this policy set­ting, by default unknown files are logged.nnIf you dis­able this policy set­ting, unknown files are not logged.nnEnabling this policy set­ting can res­ult in a great­er num­ber of events in the log.”
SpyNetReporting=“Configure Microsoft SpyNet Reporting”
SpyNetReporting_Explain=“Adjusts mem­ber­ship in Microsoft SpyNet.nnMicrosoft SpyNet is the online com­munity that helps you choose how to respond to poten­tial spy­ware threats. The com­munity also helps stop the spread of new spy­ware infections.nnHere’s how it works. When Win­dows Defend­er detects soft­ware or changes by soft­ware not yet clas­si­fied for risks, you see how oth­er mem­bers respon­ded to the alert. In turn, the action you apply help oth­er mem­bers choose how to respond. Your actions also help Microsoft choose which soft­ware to invest­ig­ate for poten­tial threats. You can choose to send basic or addi­tion­al inform­a­tion about detec­ted soft­ware. Addi­tion­al inform­a­tion helps improve how Win­dows Defend­er works. It can include, for example, the loc­a­tion of detec­ted items on your com­puter if harm­ful soft­ware has been removed. Win­dows Defend­er will auto­mat­ic­ally col­lect and send the information.nnIf you enable this policy set­ting and choose “No Mem­ber­ship” from the drop-down list, SpyNet mem­ber­ship will be dis­abled. At this set­ting, no inform­a­tion will be sent to Microsoft. You will not be aler­ted if Win­dows Defend­er detects unclas­si­fied soft­ware run­ning on your com­puter. Loc­al users will not be able to change their SpyNet membership.nnIf you enable this policy set­ting and choose “Basic” from the drop-down list, SpyNet mem­ber­ship is set to “Basic”. At this set­ting, basic inform­a­tion about the detec­ted items and the actions you apply will be shared with the online com­munity. You will not be aler­ted if Win­dows Defend­er detects soft­ware that has not yet been clas­si­fied for risks.nnIf you enable this policy set­ting and choose “Advanced” from the drop-down list, SpyNet mem­ber­ship is set to “Advanced”. At this set­ting, you send your choices and addi­tion­al inform­a­tion about detec­ted items. You are aler­ted so you can take action when Win­dows Defend­er detects changes to your com­puter by unclas­si­fied soft­ware. Your decisions to allow or block changes help Microsoft cre­ate new defin­i­tions for Win­dows Defend­er and bet­ter detect harm­ful soft­ware. In some instances, per­son­al inform­a­tion may be sent but no inform­a­tion is used to con­tact you.nnIf you dis­able or do not con­fig­ure this policy set­ting, by default SpyNet mem­ber­ship is dis­abled. At this set­ting, no inform­a­tion will be sent to Microsoft. You will not be aler­ted if Win­dows Defend­er detects unclas­si­fied soft­ware run­ning on your com­puter. Loc­al users will still be able to change their SpyNet membership.”
SpyNetReporting_DropDownList=“Microsoft SpyNet Membership”
SpyNetReporting_DropDownList_Disabled=“No Membership”
SpyNetReporting_DropDownList_Basic=“Basic”
SpyNetReporting_DropDownList_Advanced=“Advanced”
CheckAlternateDownloadLocation=“Turn on defin­i­tion updates through both WSUS and Win­dows Update”
CheckAlternateDownloadLocation_Explain=“This policy set­ting allows you to con­fig­ure Win­dows Defend­er to check and install defin­i­tion updates from Win­dows Update when a loc­ally man­aged Win­dows Serv­er Update Ser­vices (WSUS) serv­er is not available.nnWindows Defend­er checks for defin­tion updates using the Auto­mat­ic Updates cli­ent. The Auto­mat­ic Updates cli­ent can be con­figured to check the pub­lic Win­dows Update Web site or a loc­ally man­aged WSUS serv­er. When a com­puter is not able to con­nect to an intern­al WSUS serv­er, such as when a port­able com­puter is roam­ing out­side of the cor­por­ate net­work, Win­dows Defend­er can be con­figured to also check Win­dows Update to ensure defin­i­tion updates are delivered to these roam­ing machines.nnIf you enable or do not con­fig­ure this policy set­ting, by default Win­dows Defend­er will check for defin­i­tion updates from Win­dows Update, if con­nec­tions to a loc­ally man­aged WSUS serv­er fail.nnIf you dis­able this policy set­ting, Win­dows Defend­er will check for defin­i­tion updates only on a loc­ally man­aged WSUS serv­er, if the Auto­mat­ic Updates cli­ent is so configured.nn”
WindowsXP=“Microsoft Win­dows XP or later”
GPOnly=“Unsupported Admin­is­trat­ive Templates”
GPOnlyPolicy=“EZ_GPO.adm”
EZ_GPO=“EZ GPO by the Envir­on­ment­al Pro­tec­tion Agency”
MONITOR_PM=“PC Power Management”
BASE_CFG=“Base Options”
BASE_CFG_EXP=“These are the base con­fig­ur­a­tion set­tings for the pro­gram to func­tion. You should enable this and choose all of the defaults unless you are sure about what you are doing. See the doc­u­ment­a­tion for more info.”
OPTIONS=“Options”
OPTIONS_EXP=“The first option named Secur­ity Bypass (NB: User based only and not found under the Com­puter Policy hive) dir­ects the tool to bypass the hard­coded restric­tions placed on it to change power man­age­ment set­tings. See the doc­u­ment­a­tion for more but it is only needed when users are of type user or guest. Note, this is a safety over­ride (like rm ‑f) and does not actu­ally gives users of insuf­fi­cient rights, the abil­ity to change PM set­tings. The second option, Force Standby, over­rides the default beha­vi­or of the tool which enables sys­tem standby on machines cap­able of S3 (ACPI ver.2) or bet­ter. Enabling this option will allow the tool to set standby on earli­er ACPI and APM2 cap­able machines. This could be use­ful for non Intel or laptop heavy envir­on­ments since standby worked bet­ter on non S3 cap­able laptops as opposed to desktops.
SettingsSchemeSimpleIndex=“Simple Set­tings Scheme”
SETTINGS_SCHEME_SIMPLE=“Simple Scheme”
SETTINGS_SCHEME_SIMPLE_EXP=“This is the most basic Set­tings Scheme avail­able. Each set­ting can be set to a range of 0–300 minutes where 0 = ‘Nev­er’. NB: Hiberna­tion should be high­er than Sys­tem Standby or set to 0. It should nev­er be equal to Sys­tem Standby.”[/xml]

Источник

Applies To: Windows Server 2003 (see admx/adml for higher version of windows servers)

This section includes a complete reference guide for using the .adm language to create policy settings.

Each .adm file can contain zero or more policy settings, and each policy setting in turn can contain zero or more parts. The .adm language includes the following components:

  • Comments
  • Strings
  • CLASS
  • CATEGORY
  • POLICY
  • PART
  • ITEMLIST
  • ACTIONLIST

.Adm File Language Versions

You can specify that any part of your .adm file be evaluated only in specific versions of the Group Policy editing tools. Table 5 lists the versions of the Group Policy editing tools.

Table 5   Versions of Group Policy Editing Tools

Operating System(s) Version Type
Windows XP SP2 5.0 Group Policy
Windows Server 2003 and Windows XP 4.0 Group Policy
Windows Server 2000 3.0 Group Policy
Windows NT® 3.x and 4.x 2.0 System Policy
Windows 95 1.0 System Policy

Comments

You can use two methods to add comments to an .adm file. You can precede the comment either with a semicolon (;) or with two forward slashes (//). You can place comments at the end of any valid line.

Strings

To add strings to an .adm file, precede the text with two exclamation points (!!). At the end of the .adm file, all strings must be defined in the [strings] section. The strings must be enclosed in quotation marks (“). Optionally, you can enclose a variable name or hard-coded string in quotation marks.

Example

POLICY 34]!!LimitSize 
   EXPLAIN!!LimitSize_Explain   ; This string is stored in the strings section 
   TIP1 "Limit Profile Size to"   ; This string is hard coded 
 
[strings] 
LimitSize="Limit profile size" 
LimitSize_Explain="Limits the size of user profiles"

Best Practice

Place all strings in the [strings] section of the .adm file. This facilitates conversion of the .adm file to other languages (that is, for localization), as you only need to modify the [strings] section of an .adm file to port it to different languages.

CLASS

This component defines where your policy setting is displayed in the Group Policy Object Editor.

The first entry in the .adm file is the keyword CLASS. This specifies whether the subsequent entries should be displayed under theComputer Configuration or User Configuration node of Group Policy Object Editor.

Syntax

The CLASS syntax is as follows:

Name

This defines the name of the CLASS, which must be MACHINE or USER.

If the .adm file contains a CLASS other than the valid classes (MACHINE or USER), the errors are ignored when loaded in Group Policy Object Editor.

Example

The following examples illustrate the use of the CLASS component.

Note
You can define multiple CLASS USER or CLASS MACHINE sections in an .adm file. When the file is processed, all the CLASS USER sections are merged, and all CLASS MACHINE sections are merged. However, for ease of ongoing .adm file management, it is recommended that you define CLASS USER or CLASS MACHINE once.

CATEGORY

After you define the CLASS component, you can use the CATEGORY component to display a node name under which your policy setting is displayed in the Group Policy Object Editor.

Note
You can create child nodes by nesting a CATEGORY within another CATEGORY.

Syntax

To specify a CATEGORY, use the following syntax.

CATEGORY!!name 
    KEYNAME key name 
    [policy definition statements] 
END CATEGORY

name

The CATEGORY name as it should appear in the Group Policy Object Editor list box. Optionally, you can enclose the variable name in quotation marks (“). Names with spaces must be enclosed in quotation marks.

key name

The key name is an optional path to the registry key to use for the CATEGORY.

Do not use HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER in the registry path as the preceding CLASS statement specifies the keys to use. If you specify a key name, all child categories, policies, and parts will use this key name, unless they specifically provide a key name of their own. Names with spaces must be enclosed in double quotation marks.

If a key name is not specified and if no higher level category specifies a key name, each policy in this category must specify its own key name: otherwise, the key name for the next category that does specify a key name will be used.

policy definition statements

A CATEGORY can include zero or more POLICY statements. A POLICY definition statement cannot appear more than once within a single category, as shown in the following sample code.

Example

CLASS USER 
 
; The following categories will be displayed 
; under User Configuration 
 
CATEGORY !!Desktop 
   KEYNAME "Software\Policies\System" 
 
   ; <INSERT POLICIES HERE> 
 
   CATEGORY !!InternalApps 
   KEYNAME "Software\Policies\InternalApps" 
 
    ; <INSERT POLICIES HERE> 
 
   END CATEGORY 
END CATEGORY 
 
[strings] 
Desktop="Desktop Settings" 
InternalApps="Line of Business Apps settings"

Supported Tag

The Group Policy Object Editor uses the Supported tag to populate the Requirements field. This tag informs the Group Policy administrator about the platforms or applications for which the policy setting is supported. For example, many of the policy settings included in the System.adm file use a Supported tag that specifies a specific service pack release. Often, the string used for the Supported tag will make reference to multiple operating system or service packs.

While operating system components generally use an operating system or service pack reference in this field, applications – which can be updated outside the release of a service pack – can refer to a specific version of an application. The Supported tag is an essential element in the data presented to Group Policy administrators to ensure they are equipped with the right information to make informed decisions about the use of the policy setting.

Because your .adm file may be localized, it is highly recommended that the Supported tag use the !!Stringname construct, which allows the referenced string to be localized easily. In addition, since the Supported tag is only supported in Windows XP and later operating systems, it should be enclosed within a Version construct, as follows (this ensures that the Windows 2000 version of Group Policy Object Editor does not attempt to interpret the Supported tag):

#if version >= 4 
        SUPPORTED!!SUPPORTED_MyApplication 
    #endif

CATEGORY Keywords

The valid keywords for CATEGORY are:

  • KEYNAME
  • CATEGORY
  • POLICY
  • END
  • SUPPORTED
Note
If you have a CATEGORY defined with a default KEYNAME in it, and the same category is found again later in the .adm file, that same default KEYNAME is still in effect. This means that you can get an error message about KEYNAME being defined twice, when it was actually just defined in the same category earlier. To remove the error condition, remove the duplicate category entry.

POLICY

To identify a policy setting that the user can modify, use the keyword POLICY. The policy and its associated controls are displayed in a dialog box that administrators use to set the state of the policy. You can use multiple POLICY key names under one KEYNAME.

The following examples illustrate the syntax of POLICY.

Syntax

POLICY name 
   [KEYNAME key name] 
   [EXPLAIN help string] 
   [VALUENAME value name] 
   [CLIENTEXT guid] 
   [part definition statements] 
END POLICY

name

The name of the policy as it should be displayed in the Group Policy Object Editor namespace.

key name

This is an optional path to the registry key to use for the category. Do not include HKEY_LOCAL_MACHINE orHKEY_CURRENT_USER in the registry path as the preceding CLASS statement determines which of these keys is used.

If you specify a key name, all PART definition statements will use this key name unless they specifically provide a key name of their own.

If a key name is not specified and if no higher level category specifies a key name, each policy in this category must specify its own key name: otherwise, the key name for the next category that does specify a key name will be used.

help string

The Help string is the text displayed in the Explain tab of the dialog box for the policy setting.

value name

Value name is the registry value to modify. Selecting this option sets the value as a REG_DWORD of 1. Clearing the option removes the registry value. To specify values other than the default values, use the VALUEON and VALUEOFF statements directly following the corresponding VALUENAME statement. These statements are specified as follows:

VALUEON on value 
VALUEOFF off value

When you use these statements, the behavior is modified such that if the administrator selects the option, the value is set to on value. If the administrator clears the option, the value is set to off value.

guid

This is an optional value that specifies the globally unique identifier (GUID) of the snap-in extension.

part definition statements

A policy can contain zero or more PART statements to specify various options, including drop-down list boxes, text boxes, and text in the lower pane of the Group Policy Object Editor.

POLICY Example

CLASS MACHINE 
 
CATEGORY!!DiskQuota 
 
   KEYNAME "Software\Policies\MS\DiskQuota" 
 
   POLICY!!DQ_Enable 
      EXPLAIN !!DQ_Enable_Help 
      VALUENAME "Enable" 
         VALUEON  NUMERIC 1 
         VALUEOFF NUMERIC 0 
      CLIENTEXT {3610eda5-77ef-11d2-8dc} 
 
      PART!!DQ_EnableTip1    TEXT     
      END PART 
   END POLICY 
 
END CATEGORY 
 
[strings] 
DiskQuota="Disk Quotas" 
DQ_Enable="Enable disk quotas" 
DQ_Enable_Help="Enables and disables disk quota management" 
DQ_EnableTip1="Enable disk quotas for all NTFS volumes"

POLICY Keywords

The valid keywords for POLICY are:

  • KEYNAME
  • PART
  • VALUENAME
  • VALUEON
  • VALUEOFF
  • ACTIONLISTON
  • ACTIONLISTOFF
  • END
  • HELP
  • CLIENTEXT
  • POLICY

PART

Use PART to specify various options, such as drop-down list boxes, text boxes, and text in the lower pane of Group Policy Object Editor.

For a simple policy where you only need to set a registry key to either 1 or 0, you do not need to use PART. PART allows a richer system administrator experience, and collects more information from the administrator through simple controls.

Syntax

PART name part-type type-dependent data 
  [KEYNAME key name] 
  [VALUENAME value name] 
END PART

name

Specifies the PART name as it should appear in Group Policy Object Editor. You can enclose it in quotation marks (“). Names with spaces must be enclosed in quotation marks (“).

part-type

A policy PART type. Table 6 lists the valid types for POLICY.

Table 6   Policy PART Types

Type Description
CHECKBOX Displays a check box. The value is set in the registry with the REG_DWORD type. The value is other than zero if the check box is selected and zero if it is not selected.
COMBOBOX Displays a combo box.
DROPDOWNLIST Displays a combo box with a drop-down list style. The user may choose only one of the entries supplied.
LISTBOX Displays a list box with Add and Remove buttons. This is the only PART type that can be used to manage multiple values under one key.
EDITTEXT Displays a text box that accepts alphanumeric text. The text is set in the registry with either the REG_SZ or the REG_EXPAND_SZ type.
TEXT Displays a line of static text. There is no associated registry value with this PART type.
NUMERIC Displays a text box with an optional spin control that accepts a numeric value. The value is set in the registry with the REG_DWORD type.

type-dependent data

This is information about the PART.

key name

This is an optional path to the registry key to use. Do not include HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER in the registry path as the preceding CLASS statement determines which of these keys is used.

If no key name is specified, the previous key name in the hierarchy is used.

value name

The value name indicates the registry value to modify. Selecting this option sets the value to a REG_DWORD of 1, and clearing the option removes the registry value. If you want to specify values other than the default values, use the VALUEON and VALUEOFFstatements directly following the corresponding VALUENAME statement. You specify these statements as follows:

VALUEON on value 
VALUEOFF off value

Keywords

The valid keywords for PART are:

  • CHECKBOX
  • TEXT
  • EDITTEXT
  • NUMERIC
  • COMBOBOX
  • DROPDOWNLIST
  • LISTBOX
  • END
  • CLIENTEXT
  • PART

Using PART Types to Add Controls to the User Interface

Using the valid keywords along with the PART component allows you to add text and various user interface controls to the properties page of the policy.

Because much of the syntax is related, the next section presents a task-based approach to writing the syntax for these PART types used to create the user interface elements above.

Using the different PART types, you can add text and controls to enhance a policy setting. These types need to be used with thePART component as previously defined.

CHECKBOX PART Type

This PART type displays a check box on the Property page of a policy setting. The value is set in the registry with the REG_DWORD type. The default behavior is as follows:

  • By default the check box is not selected.
  • A check box writes the value 1 to the registry if it is selected and 0 if it is not selected.

Syntax

PART text CHECKBOX 
   VALUENAME value name  
END PART

text

This represents the text to be displayed on the right of the check box that you are creating. You can hard code it and enclose it in quotation marks (“) or you can make the string a variable by putting !! in front of the variable name.

value name

Indicates the registry value to which the selected value will be written. Selecting the option sets the value as a REG_DWORD of 1. Clearing the option removes the registry value. To specify values other than the default values, use the VALUEON and VALUEOFFstatements directly following the corresponding VALUENAME statement. These statements are specified as follows:

VALUEON on value 
VALUEOFF off value

When you use these statements, the behavior is modified such that if the administrator selects the option, the value is set to on value. If the administrator clears the option, the value is set to off value.

To override the default behavior:

To have the check box selected by default use DEFCHECKED. In the preceding sample, the syntax would be:

PART !!SampleChkBox_NotChked CHECKBOX 
         DEFCHECKED 
           VALUENAME "test1" 
    END PART

You can use VALUEON and VALUEOFF. This example accomplishes the following::

  • Writes the string “Enabled” to the registry when the check box is selected.
  • Writes a numeric value of 12 when the check box is not selected. 
    PART !!SampleChkBox_NotChked CHECKBOX 
     VALUENAME "test1" 
     VALUEON "Enabled"  
     VALUEOFF NUMERIC 12    
   END PART

To modify more than one registry key, use an ACTIONLIST.

The valid keywords for CHECKBOX are:

  • KEYNAME
  • VALUENAME
  • VALUEON
  • VALUEOFF
  • ACTIONLISTON
  • ACTIONLISTOFF
  • DEFCHECKED
  • CLIENTEXT
  • END

TEXT PART Type

The PART type TEXT can be used to display text on the Property page of a policy setting. Text uses the following syntax.

text

Text that is to be displayed is entered here. You can hard code it and enclose it in quotation marks (“), or you can make the string a variable by putting !! before the variable name.

The following example illustrates the use of TEXT. The Disable Active Desktop policy deactivates Active Desktop and prevents users from enabling or disabling Active Desktop, or from modifying the configuration.

TEXT Example

POLICY !!NoActiveDesktop 
 
   KEYNAME "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" 
   EXPLAIN!!NoActiveDesktop_Help 
     VALUENAME "NoActiveDesktop" 
 
     PART !!NoActiveDesktop_Tip    TEXT     
     END PART 
 
END POLICY

The valid keyword for TEXT is END.

EDITTEXT PART Type

The EDITTEXT option allows the user to input alphanumeric text into an edit field. The text is set in the registry with the REG_SZ type.

Syntax

PART !!text EDITTEXT 
   VALUENAME value name 
END PART

text

Text to be displayed is entered here. You can hard code it and enclose it in quotation marks (“) or you can make the string a variable by putting two explanation points (!!) before the variable name. This text is displayed on the left side of the edit box.

value name

The value name indicates the registry value to which the users input entered in the Edit Text box will be written.

Table 7 lists the options for EDITTEXT.

Table 7   Options for EDITTEXT

Option Description
DEFAULT value Specifies the initial string to place in the edit field. If this option is not specified, the field is initially empty.
MAXLEN value Specifies the maximum length of a string. The string in the edit field is limited to this length.
REQUIRED Specifies that the Group Policy Object Editor does not allow a policy containing this PART to be enabled, unless a value has been entered for this PART.
OEMCONVERT Sets the ES_OEMCONVERT style in the edit field so that typed text is mapped from ASCII to OEM and back. ES_OEMCONVERT converts text entered in the edit control. The text is converted from the Windows character set (ASCII) to the OEM character set and then back to the Windows set. This ensures proper character conversion when the application calls the CharToOem <JavaScript:hhobj_1.Click()> function to convert an ASCII string in the edit control to OEM characters. This style is most useful for edit controls that contain file names.
EXPANDABLETEXT Specifies that the text is set in the registry with the REG_EXPAND_SZ type. By default, the text is set in the registry with the REG_SZ type

The valid keywords for EDITTEXT are:

  • KEYNAME
  • VALUENAME
  • DEFAULT
  • REQUIRED
  • MAXLENGTH
  • OEMCONVERT
  • END
  • EXPANDABLETEXT
  • CLIENTEXT

EDITTEXT Example

An example of use of the PART component with EDITTEXT and TEXT follows:

CLASS USER 
CATEGORY !!DesktopLockDown 
 
  KEYNAME "Software\Policies\System" 
   POLICY !!Wallpaper    
    EXPLAIN !!Wallpaper_Explain 
 
     PART !!Wallpaper_Tip1       TEXT 
     END PART 
 
     PART !!Wallpaper_Filename   EDITTEXT 
        VALUENAME Wallpaper 
        MAXLEN 60 
     END PART 
 
   END POLICY 
 
END CATEGORY 
 
[strings] 
DesktopLockDown="Desktop Settings" 
Wallpaper="Desktop Wallpaper" 
Wallpaper_Explain="Used to set the desktop wallpaper" 
Wallpaper_FileName="Filename" 
Wallpaper_Tip1="Specify UNC Path for selected wallpaper"

In the preceding example, the text entered into the edit field is written to the registry keyHKEY_CURRENT_USER\Software\Policies\System\Wallpaper. The text can be a maximum of 60 characters.

When this policy setting is Not Configured or Disabled, this key is not written.

EXPANDABLETEXT Example

The following example writes a value to registry with data type REG_EXPAND_SZ.

For example:

PART!!MyVariable    EDITTEXT EXPANDABLETEXT 
VALUENAME ValueToBeChanged 
END PART

REQUIRED Example

The following example generates an error if the user does not enter a value when required.

PART!!MyVariable    EDITTEXT REQUIRED 
  VALUENAME ValueToBeChanged 
END PART

MAXLEN Example

The following example specifies the maximum length of text.

PART!!MyVariable    EDITTEXT 
  VALUENAME ValueToBeChanged 
  MAXLEN 4 
END PART

DEFAULT Example

The following example specifies a default value. This can be used for text or numeric data.

PART!!MyVariable    EDITTEXT 
  DEFAULT !!MySampleText 
  VALUENAME ValueToBeChanged 
END PART

NUMERIC PART Type

Displays an edit field with an optional spinner control (an up-down control) that accepts a numeric value.

NUMERIC Syntax

PART text NUMERIC  
   VALUENAME value name  
   MIN value  
   MAX value 
   DEFAULT value 
   SPIN value  
END PART

text

This represents the text to be displayed on the right of the spin control that you are creating. You can hard code it and enclose it in quotation marks (“) or you can make the string a variable by putting !! before the variable name.

value name

Indicates the registry value to which the selected value will be written.

NUMERIC Default Behavior

The default behavior for the NUMERIC PART type is as follows:

  • The value is set in the registry as a REG_DWORD type.
  • You can optionally have the value written as a REG_SZ type by using the TXTCONVERT keyword.

Table 8 shows the options for the NUMERIC type.

Table 8   Options for NUMERIC

Option Description
DEFAULT value Specifies the initial numeric value for the edit field. If this option is not specified, the field is initially empty.
MAX value Specifies the maximum value for the number. The default value is 9999.
MIN value Specifies the minimum value for the number. The default value is 0.
REQUIRED Specifies that the Group Policy Object Editor does not allow a policy containing this PART to be enabled unless a value has been entered for this PART.
SPIN value Specifies increments to use for the spinner control. The default is SPIN 1. SPIN 0 removes the spinner control.
TXTCONVERT Writes values as REG_SZ strings (“1”, “2”, or “128”) rather than as binary values.

The valid keywords for NUMERIC are:

  • KEYNAME
  • VALUENAME
  • MIN
  • MAX
  • SPIN
  • DEFAULT
  • REQUIRED
  • TXTCONVERT
  • END
  • CLIENTEXT

Examples of NUMERIC Use

The following example illustrates use of the NUMERIC PART type using the DEFAULT option.

PART!!MyVariable    NUMERIC 
  DEFAULT 5 
  VALUENAME ValueToBeChanged 
END PART

The following example illustrates use of the minimum and maximum valid values for a variable.

PART!!MyVariable    NUMERIC 
  MIN 100 
  MAX 999 
  DEFAULT 55 
  VALUENAME ValueToBeChanged 
END PART

The following example illustrates use of the NUMERIC PART type using SPIN. In this case, increments of 100 are used for the spin control.

PART !!ProfileSize    NUMERIC REQUIRED SPIN 100 
 
        VALUENAME "MaxProfileSize" 
        DEFAULT 30000 
        MAX     30000 
        MIN     300 
END PART

The following example illustrates use of the NUMERIC PART type using the TXTCONVERT option, which writes values as REG_SZstrings (such as “60”) instead of binary values.

PART !!ScreenSaverTimeOutFreqSpin    NUMERIC DEFAULT 900 
 
        MIN 0 MAX 599940 SPIN 60 
        TXTCONVERT 
        VALUENAME "ScreenSaveTimeOut" 
END PART

COMBOBOX PART Type

This PART type displays a combo box. It accepts the same options as EDITTEXT, as well as the SUGGESTIONS option, which begins a list of suggestions to be placed in the drop-down list. SUGGESTIONS are separated with spaces and must be enclosed in quotation marks (“) when a value includes spaces. If a suggestion name includes white space, it must be enclosed in quotation marks. The list ends with END SUGGESTIONS.

Example

The following example illustrates the use of the SUGGESTIONS option.

SUGGESTIONS 
  Alaska Alabama Mississippi "New York" 
END SUGGESTIONS

Keywords

The valid keywords for COMBOBOX are:

  • KEYNAME
  • VALUENAME
  • DEFAULT
  • SUGGESTIONS
  • REQUIRED
  • MAXLENGTH
  • OEMCONVERT
  • END
  • NOSORT
  • EXPANDABLETEXT
  • CLIENTEXT
  • END

DROPDOWNLIST PART Type

Displays a combo box with a drop-down list style. The user may choose only one of the entries supplied.

Note
GPMC requires that you define the key name and value name before you specify DROPDOWNLIST.

DROPDOWNLIST Syntax

DROPDOWNLIST uses the following syntax.

PART !!text DROPDOWNLIST  
   ITEMLIST 
     NAME name VALUE value 
     .. 
     NAME name VALUE value  
   END ITEMLIST 
END PART

text

This represents the text to be displayed on the right of the spin control that you are creating. You can hard code it and enclose it in quotation marks (“) or you can make the string a variable by putting !! in front of the variable name.

name

This is text that will be displayed in the drop-down list for a particular item.

value

The value to be written to the specified registry key if this item is selected. Values are assumed to be strings, unless they are preceded by NUMERIC. The following example shows both string and numeric values:

VALUE "Some value"  
VALUE NUMERIC 1

The valid keywords for DROPDOWNLIST are:

  • KEYNAME
  • VALUENAME
  • REQUIRED
  • ITEMLIST
  • END
  • NOSORT
  • CLIENTEXT

LISTBOX PART Type

The LISTBOX PART component specifies various options such as drop-down list boxes, text boxes, and text in the lower pane of the Group Policy Object Editor. LISTBOX accepts the options shown in Table 9.

Table 9   LISTBOX Options

LISTBOX Option Description
ADDITIVE By default, the content of list boxes overrides any values set in the target registry. This means that a control value is inserted in the policy file that causes existing values to be deleted before the values set in the policy file are merged. If this option is specified, existing values are not deleted, and the values set in the list box is in addition to whatever values exist in the target registry.
EXPLICITVALUE This option makes the user specify the value data and the value name. The list box shows two columns, one for the name and one for the data. This option cannot be used with the VALUEPREFIX option.
VALUEPREFIX prefix The prefix you specify is used in determining value names. If a prefix is specified, the prefix and an incremented integer are used, instead of the default value naming scheme described previously. For example, a prefix of “SampleName” generates the value names “SampleName1”, “SampleName2”, and so on. The prefix can be empty (“”), which causes the value names to be “1”, “2”, and so on.

By default, only one column appears in the list box, and for each entry a value is created whose name and value are the same. For instance, a “name” entry in the list box creates a value called “name” that contains data called “name”. When using a LISTBOX, use the ADDITIVE keyword unless you have a specific reason not to do so.

The valid keywords for LISTBOX are:

  • KEYNAME
  • VALUEPREFIX
  • ADDITIVE
  • NOSORT
  • EXPLICITVALUE
  • EXPANDABLETEXT
  • END
  • CLIENTEXT
Note
Windows XP SP2 fixed issues relating to the LISTBOX ADDITIVE functionality. For more information, see the “Changes to LISTBOX ADDITIVE” section in this document.

ACTIONLIST

You can use an action list to specify a set of arbitrary registry changes to make in response to a control being set to a particular state.

Syntax

The ACTIONLIST syntax is as follows:

ACTIONLIST 
[KEYNAME key name] 
VALUENAME value name  
VALUE value  
END ACTIONLIST

key name

This is an optional path to the registry key. Do not include HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER in the registry path as the preceding CLASS statement determines which of these keys is used. If no key name is specified, the previous key name in the hierarchy is used.

value name

Indicates the registry value to modify. Selecting this option sets the value to a REG_DWORD of 1, and clearing the option removes the registry value. If you want to specify values other than the default values, use the VALUEON and VALUEOFF statements directly following the corresponding VALUENAME statement. You specify these statements as follows:

VALUEON on value  
VALUEOFF off value

value

Values are treated as strings unless they are preceded by NUMERIC, as in the following examples:

VALUE "Some value"  
VALUE NUMERIC 1

If VALUE is followed by DELETE (for example, VALUE DELETE), the registry entry is deleted.

Table 10 lists the two variants for ACTIONLIST that can be used with POLICY and CHECKBOX.

Table 10   Variants for ACTIONLIST

Variant Description
ACTIONLISTON Specifies an optional action list to be used if the check box is selected.
ACTIONLISTOFF Specifies an optional action list to be used if the check box is not selected.

ACTIONLIST Example

The following example illustrates the use of ACTIONLISTON and ACTIONLISTOFF.

POLICY  "Deny connections requests" 
    EXPLAIN "If enabled, TS will stop accepting connections" 
    ACTIONLISTON 
       VALUENAME "fDenyTSConnections"    VALUE NUMERIC 1 
    END ACTIONLISTON 
    ACTIONLISTOFF 
       VALUENAME "fDenyTSConnections"    VALUE NUMERIC 0 
    END ACTIONLISTOFF 
END POLICY

Additional Elements

The .adm language supports the following elements:

KEYNAME

The KEYNAME keyword is used within a CATEGORY to define which key within the registry is modified as a result of an action here.KEYNAME should be followed by the registry path to the key that contains the value that you want to change. Do not includeHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER in the registry path as the preceding CLASS statement determines which of these keys is used.

If the KEYNAME contains a space, you must enclose the string in quotation marks (“).

VALUENAME

Defines the options available within a POLICY. First identify the registry value that is to be modified as a result of using the keywordVALUENAME. For example, VALUENAME MyFirstValue.

The following example illustrates the use of VALUENAME. The Disable Boot / Shutdown / Logon / Logoff status messages policy prevents the display of system status messages.

POLICY!!DisableStatusMessages 
    KEYNAME "Software\Microsoft\Windows\CurrentVersion\Policies\System" 
       EXPLAIN!!DisableStatusMessages_Help 
       VALUENAME "DisableStatusMessages" 
END POLICY

Unless you specify otherwise, the value is written in the following format when the user checks or clears the option:

  • Checked. Uses a REG_DWORD type with a value of 1.
  • Cleared. Removes the value.

You can specify options other than these defaults by using VALUEOFF and VALUEON. If the option is to be selected within the lower pane of the Group Policy Object Editor, the VALUENAME needs to be within a PART scope.

CLIENTEXT

The CLIENTEXT keyword is used to specify which client-side extension to the Group Policy Object Editor needs to process the particular settings on the client computer. By default, the registry extension processes all settings configured under the Administrative Templates node. The CLIENTEXT keyword changes the default behavior and causes the specified extension to process these settings after the registry extension has placed them in the registry.

CLIENTEXT must be used within either the POLICY scope or the PART scope and should follow the VALUENAME statement.

The following example illustrates use of CLIENTEXT.

POLICY !!DQ_Enforce 
 
            #if version >= 4 
                 SUPPORTED !!SUPPORTED_Win2k 
            #endif 
 
            EXPLAIN !!DQ_Enforce_Help 
                 VALUENAME "Enforce" 
                 VALUEON  NUMERIC 1 
            VALUEOFF NUMERIC 0 
            CLIENTEXT {3610eda5-77ef-11d2-8dc5-00c04fa31a66} 
 
        END POLICY

The GUID that follows the CLIENTEXT keyword is the GUID of the client-side extension. The client-side extensions are listed in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT \CurrentVersion\Winlogon\GPExtensions.

VALUEON and VALUEOFF

You can use VALUEON and VALUEOFF to write specific values based on the state of the option. To enable this functionality, you can write the .adm file as described in the following examples:

KEYNAME key name 
   POLICY!!MyPolicy 
     VALUENAME ValueToBeChanged 
     VALUEON "Turned On" VALUEOFF "Turned Off" 
   END POLICY

KEYNAME key name  
   POLICY!!MyPolicy 
     VALUENAME ValueToBeChanged 
     VALUEON 5 VALUEOFF 10 
   END POLICY

Using Simple Policies and Policies with the VALUEOFF and VALUEON Statements

This section presents two examples that illustrate the difference between using the default policy states and specifying VALUEONand VALUEOFF statements. There is a significant difference between the two example policies.

Example 1

In this example, no explicit VALUEON or VALUEOFF statements are used. This means that the Administrative Templates use the default behavior when the user changes the state of this policy.

POLICY!!EnableSlowLinkDetect 
    EXPLAIN !!EnableSlowLinkDetect_Help 
    KEYNAME "Software\Policies\Microsoft\Windows\System" 
    VALUENAME "SlowLinkDetectEnabled" 
END POLICY

Table 11 lists the default behavior.

Table 11  Example 1 Policy Defaults

State Behavior
Policy setting enabled A DWORD with the value 1 is written to the registry.
Policy setting disabled The registry value is deleted.
Policy setting not configured Nothing is changed in the registry.

Note the policy-disabled state. The value is not written to the registry with the value of 0—instead it is explicitly deleted. This means that a component reading the policy will not find the value in the registry, and will fall back to using the default in the code.

Example 2

In this example, the state values are explicitly defined, so when the user changes the policy, the Administrative Templates use these values.

POLICY!!EnableSlowLinkDetect 
    EXPLAIN!!EnableSlowLinkDetect_Help 
    KEYNAME "Software\Policies\Microsoft\Windows\System" 
    VALUENAME "SlowLinkDetectEnabled" 
        VALUEON NUMERIC 1 
        VALUEOFF NUMERIC 0 
END POLICY

Table 12 lists the behaviors in Example 2.

Table 12  Example 2 Policy Defaults

State Behavior
Policy setting enabled A DWORD with the value 1 is written to the registry.
Policy setting disabled A DWORD with the value 0 is written to the registry.
Policy setting not configured Nothing is changed in the registry.

EXPLAIN

The EXPLAIN keyword is used to provide online Help text for a specific Group Policy. In Windows 2000, the Properties page for each policy setting includes an Explain tab, which provides details about the policy settings.

Each Group Policy that you create should include one EXPLAIN keyword, followed by at least one space, and then the EXPLAINstring in quotation marks (“) or a reference to the Help string. For example:

POLICY!!Pol_NoConfigCache 
#if VERSION >= 3 
EXPLAIN!!Pol_NoConfigCache_Help 
#endif 
    VALUENAME "NoConfigCache" 
    PART!!Lbl_NoConfigCacheHelp1       TEXT 
END PART 
END POLICY 
       ..... 
 
[Strings] 
Pol_NoConfigCache_Help="Prevents users from changing the automatic  
synchronization behavior at logoff."

In the preceding example, Help is offered for one of the Offline Files options. The EXPLAIN keyword wrapped in the #if VERSIONallows this .adm file to be used with the Windows 2000 Group Policy Object Editor (version 3).

Line Breaks

To start text on a new line or to create a line break, use this syntax:

\n = Starts a new line 
\n\n = Creates a line break

#If Version for Version Comparison

The IF VERSION conditional statement is used to control the display of certain policy settings and features in the Administrative Templates node, based on the version of the Group Policy Object Editor that you are using. IF VERSION allows for part of the .adm files to be conditionally parsed and ignored by earlier versions of the Group Policy Object Editor tool. For example, the SUPPORTED tag is not supported on versions of the Group Policy Object Editor earlier than version 4. For this reason any statement using the SUPPORTED tag should be enclosed by #If Version…#endif.

You can specify that any part of your .adm file be evaluated only in specific versions of the Group Policy editing tools, as shown in Table 5, in the “.Adm File Language Versions” section of this document.

To compare versions, use the following syntax:

#if Version (operator) x 
#endif

The valid operators are listed in Table 13.

Table 13   Valid Operators for the Version Statement Number

Operator Signifies
> (GT) Greater than. For example, a > b means a is greater than b.
< (LT) Less than. For example, a < b means a is less than b.
== (EQ) Equal. For example, a == b means a is equal to b.
!= (NE) Not equal.
>= (GTE) Greater than or equal to. For example, a >= b means a is greater than or equal to b.
<= (LTE) Less than or equal to. For example, a <= b means a is less than or equal to b.

.Adm File String/Tag Limits

Various restrictions apply to .adm files and settings. Table 14 provides a complete list of these restrictions.

Table 14   

File String Tag Limits
Maximum string length for Explain text 4096
Maximum string length for Category Explain text 255
Maximum string length for EDITTEXT string 1023

Источник

If you’re running a mixed environment where you have Windows Server 2003, 2008 and 2012, can you manage Group Policy in this side-by-side environment?

Yes, but it’s important to note that in Windows Server 2008, Microsoft introduced a central store (to avoid GPO bloating) with ADMX and ADML templates to manage your  Group Policy (GP).

Windows Server 2003 (ADM Templates)

Windows Server 2008 and higher (ADMX and ADML Templates)

————————————————————————————————————————–

Question:

Can you run two GP environments side-by-side (ADMX/ADML and ADM) without causing problems, and is this supported (central store and ADM)?

Answer:

Yes, but ADMX template always win if in conflict with ADM.

————————————————————————————————————————–

Question:

If we start using a central store and manage our custom ADM through higher OS level would this jeopardise any configuration on the existing ADM’s?

Answer:

No, this will be fine.

————————————————————————————————————————–

Recommend Approach:

The best recommend approach is to move ADMX and migrate the ADM to ADMX using full armours ADMX migration tool.

XML-based format with Full Armor’s release of the ADMX Migrator tool, which Microsoft has licensed and made available through the Download Center.  This tool provides a mechanism to convert your existing ADM files into ADMX format via a simple but effective user interface.  This tool can also be used to create ADMX files afresh, which means you now have a way to create ADMX files without needing to understand the underlying ADMX format.

Links:

ADMX Migrator: https://www.microsoft.com/en-us/download/details.aspx?id=15058

Group Policy Team Blog:  http://blogs.technet.com/b/grouppolicy/

Источник

  • Home »
  • Microsoft Windows Server

Thursday, 20 December 2012

Enabling the Terminal Server feature on Windows Server limits the display of Desktop Wallpapers. This is done to prevent excessive bandwith consumption. In some situations however, you would like to configure a wallpaper to display, for example, your company logo.

Group Policies allow you to set an Active Desktop wallpaper. An Active Desktop wallpaper, unfortunately is heavy on system resources, less secure because it can run web content, and has a higher probability of failures.

Setting a simple, static, Bitmap image as a wallpaper can be done using a centrally managed, custom Administrative Template that is part of a Group Policy Object (GPO). In Windows Server 2003 an Administrative Template takes the form of an .adm file. Below are the contents of such a file. 

CLASS USER
 
  CATEGORY "Desktop"
 
    POLICY "Desktop Wallpaper"
      KEYNAME "Control Panel\Desktop"
      EXPLAIN "Configure a Static (Non-Active Desktop) Wallpaper."
      PART "Specify a path to a Bitmap (.bmp) file and configure the wallpaper style." TEXT
      END PART
      PART "Wallpaper Path:" EDITTEXT
        VALUENAME "Wallpaper"
      END PART
      PART "Wallpaper Style:" DROPDOWNLIST REQUIRED
        VALUENAME "WallpaperStyle"
        ITEMLIST
          NAME "Centered" VALUE "0" DEFAULT
          NAME "Tiled" VALUE "1"
          NAME "Stretched" VALUE "2"
        END ITEMLIST
        NOSORT
      END PART

    END POLICY
 
    POLICY "Desktop Background Color"
      KEYNAME "Control Panel\Colors"
      EXPLAIN "Configure the Desktop Background Color."
      PART "Enter RGB values between 0 and 255 seperated by spaces. E.g. 0 0 255 for blue." TEXT
      END PART
      PART "RGB Values:" EDITTEXT
        VALUENAME "Background"
        DEFAULT "0 0 0"
      END PART
    END POLICY

  END CATEGORY

Save the code above in a plain text file with the extention «.adm».

Or download the file here.

Instructions to use this custom policy:

  1. Create a new Group Policy Object (GPO) or open an existing one. Open the GPO in «Group Policy Management» or the «Group Policy Object Editor».
  2. Under «User Configuration» right-click the «Administrative Templates» node.
  3. Click «Add/Remove Templates…».
  4. Click «Add» and browse to the .adm file.
  5. Click «Close».
  6. Important: while the «Administrative Templates» node is selected open the «View» menu and click «Filtering…». Uncheck «Only show policy settings that can be fully managed».

The Desktop Wallpaper and Desktop Background Color settings are now available for configuration under Administrative Templates\Desktop (Path; Style/Position: Centered, Tiled, Stretched; Color). Configure the options as desired and link the GPO to an appropriate OU.

Картинка с сайта: www.davethijssen.nl

UNC paths are permitted.

Posts

Источник

Понравилась статья? Поделить с друзьями:
0 0 голоса
Рейтинг статьи
Подписаться
Уведомить о
guest

0 комментариев
Старые
Новые Популярные
Межтекстовые Отзывы
Посмотреть все комментарии
  • Центр обновления windows стоит ли обновлять
  • Как сделать кнопку сон windows 10 на рабочий стол
  • Как развернуть zabbix на windows
  • Anyconnect client for windows download
  • Finder mac os for windows