Section 12: Creating and Deploying Administrative Templates Introducing Administrative Templates...

Section 12: Creating and Deploying Administrative Templates

Introducing Administrative Templates

Legacy ADM Templates

Using the New ADMX Templates

Converting and Creating Custom ADMX

Templates

Using the ADMX Central Store

Managing Windows Environments with Group Policy

© 2013 Global Knowledge Training LLC. All rights reserved.

Section Objectives

After completing this section, you will be able to:Describe the benefits of using ADM templatesList some of the ADM templates that are included in

each version of WindowsList tips that you can use to write your own custom

ADM templatesDescribe the advantages of using the new ADMX file

format Identify which tool converts ADM templates to ADMX

templates and also creates new ADMX templatesDefine ADMX Central Store

12-2


Introducing Administrative Templates

12-3

Administrative Templates Nodes

Benefits of Using Administrative Templates Registry Structure Used by Administrative

Templates


Administrative Templates Nodes

Administrative Templates are collections of settings for the computer or user environment.

12-3

On Windows XP and Server 2003 systems the Administrative Templates are populated from ADM files.

On Windows Vista and later systems, the settings are loaded from ADMX files.


Benefits of Using Administrative Templates

Administrative Templates offer benefits for:

Application users

Operating system users

Software developers

12-5


Registry Structure Used by Administrative Templates

Machine keys: HKLM\Software\Policies HKLM\Software\Microsoft\Windows\CurrentVersion\Policies

User keys: HKCU\Software\Policies HKCU\Software\Microsoft\Windows\CurrentVersion\Policies

12-6


Legacy ADM Templates

The default templates are:

Conf.adm

Inetres.adm

System.adm

12-8


Custom ADM Templates

12-12

Creating Your Own ADM Templates

Loading Additional ADM Templates Using the Policy Template Editor


Creating Your Own ADM Templates

When you create a custom template setting, it will show up as a GUI dialog box for data entry.

12-13


Loading Additional ADM Templates

Microsoft and other vendors provide additional Administrative Templates to control other software and features.

12-16


Using the Policy Template Editor

Instead of editing a template file by hand, you can use the Policy Template Editor.

This tool provides a user-friendly interface for creating new template settings.

12-17


Using the New ADMX Templates

The new Administrative Templates have an ADMX extension. XML tags in

the file define the GPO structure.

Old ADM files can be converted to ADMX.

12-18


ADM vs. ADMX Format

ADM Files ADMX Files Are copied into the structure

of each GPO Language independent

Not easily customized Are stored separately from the GPO structure

Use an extensible XML architecture

12-19


Converting and Creating Custom ADMX Templates

Full Armor ADMX Migrator

Convert existing ADM files

Create custom ADMX files

12-20


Using the ADMX Central Store

Stores ADMX and ADML filesMust be created manually in:

C:\windows\sysvol\sysvol\hq.local\policies\PolicyDefinitionsCopy all of the default and custom ADMX/ADML files to

the central PolicyDefinitions folder Is detected when editing policies from Windows Vista

or laterNew templates are imported simply by copying ADMX

and ADML files to the Central Store

12-21


Summary

The benefits of using ADM templates are:Application users: Individual application settings can

be customized centrally.Operating system users: Operating system settings

can be configured or restricted from a central location.Software developers: The ADM file methodology gives

you a structured, predefined way of giving your customer the ability to manage software settings centrally, through a console that they are already using to manage the Active Directory environment.

12-23


Summary (cont.)

Many varieties of standard templates are included with each version of Windows.

The standard templates that are common to Windows 2000, Windows XP, and Windows Server 2003 are:

System.adm Inetres.adm Conf.adm Wuau.adm

The standard templates that are used with Poledit are: Common.adm Winnt.adm Windows.adm

12-23


Summary (cont.)

Some of the Office ADM templates include: Access10.adm Excel10.adm Outlk10.adm Word10.adm

12-23


Summary (cont.)

Use the following tips to write your custom ADM templates:

Use the semicolon character (;) at the start of a line to indicate a comment.

To prevent Windows NT systems from accidentally loading your Windows 2000, Windows Server 2003, or Windows XP ADM files, include a section beginning with #if version <= 2 and ending with #endif that merely displays explanatory text advising the administrator that this policy file requires Windows 2000 (or another operating system). Version 2 signifies the Windows NT policy editor, version 3 signifies the Windows 2000 console, and version 4 signifies the Windows XP console.

12-23


Summary (cont.)

The advantages of using the new ADMX file format are: The file structure allows for language independence. ADMX settings are stored separately from the GPO. ADMX files are based upon an XML file structure that is a

more widely adopted standard and allows for extensibility. The ADMX Migrator tool converts ADM templates to ADMX

templates and also creates new ADMX templates. The ADMX Central Store is where all the administrative

consoles will automatically load the available ADMX templates. You have to manually create the ADMX Central Store.

12-23/24


Knowledge Check

1. What is the ADMX Central Store?The ADMX Central Store is where all the administrative consoles will automatically load the available ADMX templates.

2. Which tool is used to convert ADM templates to ADMX templates?a. ADMX Template Editorb. ADMX Migrator toolc. Policy Template Editord. Group Policy Migrator tool

12-24


Knowledge Check (cont.)

3. What are the advantages of using the new ADMX file format? The file structure allows for language

independence. ADMX settings are stored separately from the GPO. ADMX files are based upon an XML file structure

that is a more widely adopted standard and allows for extensibility.

12-24



4. List the tips that you should use to write your custom ADM templates. Use the semicolon character (;) at the start of a line

to indicate a comment. Include a section beginning with #if version <= 2

and ending with #endif that merely displays explanatory text advising the administrator that this policy file requires Windows 2000 (or another operating system).

12-24



5. Which ADM templates are included in Windows 2000, Windows XP, and Windows Server 2003? (Choose all that apply.)a. System.adm

b. Conf.adm

c. Inetres.adm

d. Pub10.adm

12-24



6. What are the benefits of using ADM templates?Application users: Individual application settings can be customized centrally.

Operating system users: Operating system settings can be configured or restricted from a central location.

Software developers: The ADM file methodology gives you a structured, predefined way of giving your customer the ability to manage software settings centrally, through a console that they are already using to manage the Active Directory environment.

12-24

Section 12: Creating and Deploying Administrative Templates Introducing Administrative Templates...

Documents

Transcript of Section 12: Creating and Deploying Administrative Templates Introducing Administrative Templates...