tag:blogger.com,1999:blog-3533081977332243447.comments2021-08-28T06:06:54.275-03:00My Point of View ...Mariano S. Cosentinohttp://www.blogger.com/profile/01873661943499657764noreply@blogger.comBlogger27125tag:blogger.com,1999:blog-3533081977332243447.post-90822381692332578412012-04-13T03:24:48.858-03:002012-04-13T03:24:48.858-03:00The registry value for default ("@") is ...The registry value for default ("@") is set to "(Default)" in the .ADMX file, which does not work.<br /><br />You can make it work by replacing "(Default)" to an empty string "" in the .ADMX file after running the script and you will get the desired result.ChielVhttps://www.blogger.com/profile/12970470801997242811noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-32969499898329306692011-12-30T11:26:01.333-03:002011-12-30T11:26:01.333-03:00Dear Matt, Thanks for your feedback and comments. ...Dear Matt, Thanks for your feedback and comments. For sure I'm interested in your code to make the XML look nicer. I looked at doing it myself, but I did not like the work-around involved (either changing the APIs used or reopening the file as text and massaging it that way).<br /><br />I'm preparing a newer version of the script incorporating some changes suggested by Uwe Riecken in the Technet site, so it might be a great opportunity to add you contribution as well.<br /><br /><br />please send me your code to: sample at marianok d0t com d0T ar<br /><br /><br />Thanks again for your feedback, looking forward to hear from you.Mariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-70100643431836088832011-12-21T13:38:49.496-03:002011-12-21T13:38:49.496-03:00First off, fantastic script! Works great and saves...First off, fantastic script! Works great and saves a ton of time creating ADMx files.<br /><br />I have some code that you might find handy. I like to create ADMx files with multiple entries for related purposes and the XML output from this script has the XML all "jumbled" on one line so it is tough to copy/paste into my existing ADMx files. I have a couple of VBS functions that will format the XML on separate lines. It creates a new ADMx file that is formatted. I haven't bothered to do the code to create a copy of the ADMl with the same base file name as the new ADMx but that could easily be added (or, you could possibly replace the original ADMx with the formatted one--I just didn't want to change too much of your code).<br /><br />I am not sure how the code will look in a comment but here it is:<br /><br />EDIT: I can't post more than 4096 characters so I cannot include the code. I am more than happy to send it to you if you are interested. Or, I can probably split it up into a few comments...<br /><br />Thanks again, MattMatt Broadstockhttps://www.blogger.com/profile/13841910796336229131noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-33531606984768241222011-10-25T15:43:41.415-03:002011-10-25T15:43:41.415-03:00Dear Trentent, thanks for looking at my script and...Dear Trentent, thanks for looking at my script and for your feedback.<br />Regarding the error, the source of the problem is that the value that you included is a HEX encoded value, and I had been unable to find documentation on how to define this values on ADMX/L.<br />(see the caveats section on my original post)<br /><br />So the script works arround this by defining it as a string, but it is very lieklly that his will not work 100% of the cases.<br /><br />I'm still trying to get the documentation for this cases, but everytime I contacted Microsoft on this I came up empty handed.<br /><br />If you (or anyone) can tell me how to code HEX / HEX(0) records on the ADMX/L definition I would be more that glad to program it into this tool.<br /><br />Best Regards, MarianokMariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-52869997673195459202011-10-25T14:12:32.246-03:002011-10-25T14:12:32.246-03:00This registry key breaks the script when you try l...This registry key breaks the script when you try loading it via GPMC:<br />Windows Registry Editor Version 5.00<br /><br />[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles]<br />"101e6613"=hex:06,00,00,00,1c,00,00,00,30,00,00,00,52,00,00,00,68,00,00,00,7d,\<br /> 00,00,00,91,00,00,00,6e,63,61,6c,72,70,63,3a,43,43,53,43,47,59,45,58,43,30,\<br /> 31,00,6e,63,61,63,6e,5f,69,70,5f,74,63,70,3a,43,43,53,43,47,59,45,58,43,30,\<br /> 31,2e,63,63,73,2e,63,6f,72,70,00,6e,63,61,63,6e,5f,73,70,78,3a,43,43,53,43,\<br /> 47,59,45,58,43,30,31,00,6e,63,61,63,6e,5f,6e,70,3a,43,43,53,43,47,59,45,58,\<br /> 43,30,31,00,6e,65,74,62,69,6f,73,3a,43,43,53,43,47,59,45,58,43,30,31,00,6e,\<br /> <br />63,61,63,6e,5f,76,6e,73,5f,73,70,70,3a,43,43,53,43,47,59,45,58,43,30,31,00<br /><br />The error generated is:<br />[Window Title]<br />Administrative Templates<br /><br />[Main Instruction]<br />Encountered an error while parsing.<br /><br />[Content]<br />Expected one of the following possible element(s), , , , , , , , , , but found instead.<br /><br />File \\lab\SysVol\ccs.corp\Policies\PolicyDefinitions\en-US\WindowsMessagingSubsystem.adml, line 16, column 222<br /><br />[OK]Trententhttps://www.blogger.com/profile/15791628156004881187noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-15725479939428280882011-04-01T13:58:00.302-03:002011-04-01T13:58:00.302-03:00Dear Arthur, first of all thanks for looking at my...Dear Arthur, first of all thanks for looking at my script and for your comment.<br />Now, regarding hku\.Default:<br />There is a miss conception about this key. <br />Many people think that if they want to assign a default (wallpaper, screensaver, etc.) to a user, they can just add it here and this key will copied when the user first logs into the system.<br />This is incorrect. If you want to do this, you have 2 options: a) you use a regular GPO and set the properties in HKU, OR b) you edit the ntuser.dat for the default user and set there the corresponding setting. The NTUSER.dat for the default user DOES get copied into new users, so it can be used to “seed” default settings.<br /><br />Some people believe that this key can be used to set default settings for all users (new and existing) this is plain wrong as the correct way to update the properties for existing users is a GPO policy (and set the modifications on the corresponding HKU policy). While updating the NTUSER.DAT for the default user WILL apply the changes to new users (as explained before) this change will not be applied to users that already have a profile on the system.<br /><br />HKU\.Default is only for the “Local System” Account, so, if you wish, you COULD use this to set the background and the screensaver for the “Local System” Account. That screen saver would be used whenever no user is logged into the system.<br /><br />You can check http://blogs.msdn.com/b/oldnewthing/archive/2007/03/02/1786493.aspx and (if you have an old copy of TechNet) you can take a look to kb articles 305709 and 291586 where this is briefly mentioned.<br /><br /><br />Now, if you are asking if it’s possible to have a GPO to update the HKU\.Default subtree, the answer is “YES WE CAN” (sorry for the political joke I just like Obama)<br /><br />But this if you are asking if this script will generate an admx capable of updating HKU\.Default subtree, the answer is NO.<br />Let me explain it:<br />This script was developed with applications in mind, meaning the fact that we all have some application that our end users run but needs a set of registry values in place. <br />Most of the time this applications will ship with a sample .reg file and some documentation on the different keys and values, but they will not provide the system administrators with ADMX files to do the centralize management (Microsoft, and Symantec are the only exceptions I can remember). <br />So I developed this script to grab that sample .reg file and generate a valid .admx policy template. <br />In this process I made assumptions, one of those assumptions was that the administrators are a lot more likely to care about “real” users than they are about what happens when no one uses the system, so I decided that all HKU\.Default should be treated as a HKU.<br /><br />If this is what you need, let me know, I can give you a couple changes to do in the script that would accomplish this.Mariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-90988332925353865362011-04-01T13:54:41.235-03:002011-04-01T13:54:41.235-03:00This comment has been removed by the author.Mariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-76192451856605259262011-04-01T10:28:16.109-03:002011-04-01T10:28:16.109-03:00My last comment was incomplete. Here we go again:
...My last comment was incomplete. Here we go again:<br /><br />Actually, editing HKEY_USERS \.DEFAULT (for example, to change numlock, the wallpaper or default keyboard layout at logon) is possible using .admx files. However, nobody has ever documented this on technet, which is why nobody knows about it Refer this file, the only document currently existing on the internet that actually mentions this being possible:<br /><br />http://download.microsoft.com/download/8/F/B/8FBD2E85-8852-45EC-8465-92756EBD9365/WindowsServer2008andWindowsVistaSP1GroupPolicySettings.xlsx<br /><br /> <br /><br />I am quoting the specific part from the sheet “AdministrativeTemplate” from cell G385, emphasis mine:<br /><br />“_Registry policy_ allows an administrator to configure registry settings of any type. /This policy differs significantly from Administrative Templates policy/, which limits registry options and requires templatization of all settings. This policy can be used in conjunction with Security Settings\Registry policy, which allows an administrator to define access permissions and audit settings for registry keys. _/Computer policy/ registry settings that target the HKEY_CURRENT_USER hive are placed into HKEY_USERS\.Default._”<br /><br />Hopefully now more people will know about this, and you will update your script to accommodate this. :)Unknownhttps://www.blogger.com/profile/01662236900671021316noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-61515533129645994902011-04-01T10:27:19.057-03:002011-04-01T10:27:19.057-03:00I am quoting the specific part from the sheet “Adm...I am quoting the specific part from the sheet “AdministrativeTemplate” from cell G385, emphasis mine:<br /><br />“_Registry policy_ allows an administrator to configure registry settings of any type. /This policy differs significantly from Administrative Templates policy/, which limits registry options and requires templatization of all settings. This policy can be used in conjunction with Security Settings\Registry policy, which allows an administrator to define access permissions and audit settings for registry keys. _/Computer policy/ registry settings that target the HKEY_CURRENT_USER hive are placed into HKEY_USERS\.Default._”<br /><br />Hopefully now more people will know about this, and you will update your script to accommodate this. :)Unknownhttps://www.blogger.com/profile/01662236900671021316noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-71505269918638113752011-02-08T23:31:51.663-03:002011-02-08T23:31:51.663-03:00Hi Again,
Sorry!I got it now...
Thanks for sharing...Hi Again,<br />Sorry!I got it now...<br />Thanks for sharing.ANIL CHAUHNhttps://www.blogger.com/profile/02104278900159898625noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-22914785044305354702011-02-08T23:26:53.650-03:002011-02-08T23:26:53.650-03:00Hi,
I made a folder in c:\Myapp. Copied the .vbs s...Hi,<br />I made a folder in c:\Myapp. Copied the .vbs script file and a reg file (Myreg.reg). After running the script no admx/adml files where created. I am testing on a xp prof sp3 laptop before transferring to server 2008. Can you please help and guide me, I am new to group policy deployment.ANIL CHAUHNhttps://www.blogger.com/profile/02104278900159898625noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-11017458290128484002010-12-14T07:36:58.807-03:002010-12-14T07:36:58.807-03:00arianok I've importerd the template. All value...arianok I've importerd the template. All values are disabled and I can't figure out way.<br />Can you please help me ones again please? :)<br />Thanks!Ronald J. de Vrieshttps://www.blogger.com/profile/01099862274055132292noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-54216638648698450902010-12-13T08:16:48.286-03:002010-12-13T08:16:48.286-03:00Thanks marianok! I will try it tomorrow. This woul...Thanks marianok! I will try it tomorrow. This would save me a lot of time!Ronald J. de Vrieshttps://www.blogger.com/profile/01099862274055132292noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-71203553815239626862010-12-13T08:07:48.144-03:002010-12-13T08:07:48.144-03:00Dear Ronald,
You do not need to import...Dear Ronald,<br /> You do not need to import the admx/L, just copy it where the rest of the ADMX/L files are (Generally in \\your_domain_name\SYSVOL\your_domain_name\Policies\PolicyDefinitions\) and restart the GPMC it will pick it up inmediatelly.<br /><br /> I hope this helps, and sorry for the delayed answer.Mariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-7204138190800627182010-12-09T04:18:51.592-03:002010-12-09T04:18:51.592-03:00I can not import a adml/x file. Windows only accep...I can not import a adml/x file. Windows only accept adm files.<br /><br />It's on a Windows 2008 Server<br /><br />What is it that I do wrong? :)Ronald J. de Vrieshttps://www.blogger.com/profile/01099862274055132292noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-122059328491220472010-12-09T04:16:19.113-03:002010-12-09T04:16:19.113-03:00This comment has been removed by the author.Ronald J. de Vrieshttps://www.blogger.com/profile/01099862274055132292noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-37711799929733344582010-12-09T04:04:00.885-03:002010-12-09T04:04:00.885-03:00This comment has been removed by the author.Ronald J. de Vrieshttps://www.blogger.com/profile/01099862274055132292noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-51927875009889860142010-09-27T11:26:39.354-03:002010-09-27T11:26:39.354-03:00Thanks, very useful.Thanks, very useful.Asier Padillahttps://www.blogger.com/profile/17943098843679841143noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-23179303800121573672010-05-12T12:59:04.597-03:002010-05-12T12:59:04.597-03:00God bless you, you are a life saviour.God bless you, you are a life saviour.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-66890173859719956412010-04-08T09:30:58.475-03:002010-04-08T09:30:58.475-03:00I'm glad you like it !I'm glad you like it !Mariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-52509744697203542962010-04-05T21:43:36.514-03:002010-04-05T21:43:36.514-03:00awesome job! just used it and worked wonderfully. ...awesome job! just used it and worked wonderfully. thanks so much for sharing.Jordanhttps://www.blogger.com/profile/16297461203081581247noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-91933358592347387272010-03-01T19:31:35.200-03:002010-03-01T19:31:35.200-03:00Regarding the use of HKEY_USERS\.DEFAULT, let me c...Regarding the use of HKEY_USERS\.DEFAULT, let me clarify one thing so we are all in the same page. <br />Unlike common belief, the .DEFAULT subkey is not the “default settings for all users without a profile”; the .DEFAULT key is actually the key for the “Local System” Account. <br /><br />In other words, HKEY_USERS \.DEFAULT is just an alias for HKEY_USERS\S-1-5-18.<br />(see http://blogs.msdn.com/oldnewthing/archive/2007/03/02/1786493.aspx, http://www.msfn.org/board/topic/122382-hkey-usersdefault-help/ and http://social.msdn.microsoft.com/Forums/en-US/windowscompatibility/thread/f5125b7a-d5e4-4a7b-a9b6-513c5c2e430d )<br /><br />So, I have good news and bad news.<br /><br />The GOOD news: If you are actually trying to make some settings for all users, then the tool should work perfectly for you (as explained before, the tool will convert the HKU\.DEFAULT into HKCU)<br />i.e. if you have a setting being applied to for HKEY_USERS\.DEFAULT\Software the setting will be applied to for HKEY_CURRENT_USER\Software<br /><br />The Bad news: If you are really trying to settings for the “Local system” account, and only that account, then I do not believe that you can do that thru GPO.Mariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-29397439709224678782010-03-01T18:05:17.205-03:002010-03-01T18:05:17.205-03:00Additional comments:
HKU or HKEY_USERS
The ADMX d...Additional comments:<br /><br /><b>HKU</b> or <b>HKEY_USERS</b><br />The ADMX definition allows you to set policies for Users (Current User, actually) and/or Computers, this does not include the HKU or the HKEY_USERS. <br /><br />WORKAROUND: The script will treat any HKU policy as a HKCU (it will clean any named user defined as part of the HKU).<br /><br />Thanks a lot to JimmyRolaff in the MSDN site for reporting this issue.Mariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-15670840540820438972010-02-22T14:16:04.612-03:002010-02-22T14:16:04.612-03:00Also available on Technet: http://gallery.technet...Also available on Technet: http://gallery.technet.microsoft.com/ScriptCenter/en-us/8c703a2e-4685-4093-a1fc-dec107c53d13Mariano S. Cosentinohttps://www.blogger.com/profile/01873661943499657764noreply@blogger.comtag:blogger.com,1999:blog-3533081977332243447.post-37912726555354679002009-04-15T04:59:00.000-03:002009-04-15T04:59:00.000-03:00Yeah... Yahoo sucks, we know!! I guess they took e...Yeah... Yahoo sucks, we know!! I guess they took example on T-Mobile customer / billings department, same shit!!<br /><br />But, I wanna say... use GMail. They do the same things with your email about privacy, much better features, GUI rocks, you can keep you yahoo address and... it's free!Youbhttps://www.blogger.com/profile/06306448766081393609noreply@blogger.com