Group Policy ADM file Syncronization ?

[a...@spsd.org]

Good Morning,

I am planning a reconstruction of our networks Group Policies whereas
they have been hit or miss over the last 5 years. I am presently using
NW 6.5 OES 2, Zen 6.5, I believe sp1.

Considering that ADM template files are used, stored, or added from
multiple locations, is there any documentation on how to syncronize and
verify that the ADM files used throughout a network are the same
versions ? Also, which locations are key to setting the Group Policies ?

I would also like to know where the Zen DB is where the GPO settings are
stored, and whether or not there are any utilities to view the GPO
settings stored in it and clear them if the ADMs they were set with are
now gone ?

Thank you,

Tony

[Rolf Lidvall]

First, please read this thread where I answered a related question:
http://www.ndsengineers.com/zenworks-7x-policies-import/487063-quick-user-policy-question.html

The only settings regarding Group Policies stored in
eDirectory (ZEN DB) are network path and timestamp.
What ZenWork does, is a way to centrally administrate
Windows Local Group Polices (LGPO), so the function is exactly
as LGPO on a stand-alone WS.

A tool to read registry.pol:
http://www.gpoguy.com/polviewer.htm

Regards
Rolf Lidvall
Swedish Radio (Ltd)

[a...@spsd.org]

Thank you for that information, it will all be very helpful.

However, none of that explains anything about the interaction of the .adm
template files stored in ConsoleOne\1.2\bin\zen\admfiles\* and the .adm
template files on the group policy admininstration PC.

Can you shed any light on this ?

Thank you again,

Tony

[Rolf Lidvall]

> Thank you for that information, it will all be very helpful.

No problem at all, only glad to help.

> However, none of that explains anything about the interaction of the .adm
> template files stored in ConsoleOne\1.2\bin\zen\admfiles\* and the .adm
> template files on the group policy admininstration PC.
>
> Can you shed any light on this ?

Yes I can :) There is no interaction at all.
The ConsoleOne\1.2\bin\zen\admfiles is only connected to:

User and Workstation Policy Package
-> "Windows NT/2000/XP","Windows 2000" or "Windows 9x" tab
-> "User Extensible Policies"and "Computer Extensible Policies".

They are not intended/supported on Windows XP.

Beginning with Windows 2000 Microsoft implemented "Group Policies".

Since Novell's implementation of "Group Policies" is totally based on
LGPO you always create/edit "Group Policies" *locally* on the
administrative (C1) workstation and when you close editing the whole
folder structure is copied to the network location you have set in the
policy package.
This means that when you *create* a "Group Policy" the .adm-files
used are coming from the C1 workstation's %SYSTEMROOT%\inf folder.
(you can always update/add .adm-files by right-click "Administrative
Templates"
-> Add/Remove Templates from C1(MMC)).

When you *edit* an existing "Group Policy", the whole folder structure (with
.adm-files and everything) is first copied from the network location to the
local WS, then you edit locally, and when you exit editing the existing
network
folder structure will be completely overwritten with this new one.

Please, feel free to come back with further questions if anything is still
unclear.

[a...@spsd.org]

Thank you again, that was what I was looking for !

> ..adm-files and everything) is first copied from the network location

[Rolf Lidvall]

> Thank you again, that was what I was looking for !

Great!