Administrative Templates for Windows Group Policy Applications

There are several .adm files in the Windows 2000/XP/2003 directory. These files are text files called "administrative templates" that provide policy information for Group Policy administrative template projects.

On Windows 9X, the default admin.adm administrative template is stored in the same folder as the Policy Editor. In Windows 2000/XP/2003, the inf folder of the system folder contains four template files installed by default, which are:

1) System.adm: installed in Group Policy by default, which is used for system settings.

2) Inetres.adm: installed in Group Policy by default; used for Internet Explorer policy settings.

3) Wmplayer.adm: used for Windows Media Player settings.

4) Conf.adm: used for NetMeeting settings.

In the Group Policy Console of Windows 2000/XP/2003, you can add a policy template more than once, while in Windows 9X, you are allowed to open only one policy template. The following describes how to use policy templates. First of all, in the Windows 2000/XP/2003 Group Policy Console to use the following: First run the "Group Policy" program, and then select "Computer Configuration" or "User Configuration "under the" Administrative Templates "and press the right mouse button, in the pop-up menu, select" Add / Remove Templates ". Then click the "Add" button, in the pop-up dialog box, select the corresponding .adm file. Clicking the Open button opens the selected script file in the System Policy Editor and waits for the user to execute it.

Return to the main interface of the "Group Policy" editor, open the directory "Local Computer Policy ?ú User Configuration ?ú Administrative Templates", and then click on the corresponding directory tree, you will see our new administrative templates added to the configuration of the items produced! (In order to facilitate the examples later in this article, we can work together, it is recommended to add in addition to the default template file of the other template file).

Then look at the Group Policy Editor under Windows 9X. First of all, in the Group Policy Editor, "File" menu, select "Close", in order to close the current script, and then in the "Options" menu, select "Templates" and then click the "Open Template" button, select the corresponding .adm file in the pop-up dialog box and click the "Open" button, then open the selected script file in the editor and wait for the user to execute the three scripts. script file and wait for the user to execute three, run group policy

By the different operating systems, policy editing tools are divided into two kinds, one for the Windows 2000/XP/2003 Group Policy Management Console, which has been installed by default during the installation of the system; the other is the Windows 9X System Policy Editor, which is not installed during the installation of the system, the program file is located on the Windows installation disk. The program files are in the \tools\reskit\netadmin\poledit directory on the Windows installation disk, and it includes files such as Poledit.exe, Poledit.inf, and Windows.adm.

If it is a Windows 9X system by the following method, then the regular installation process can be carried out.

1. In the Control Panel, double-click the Add/Remove Programs icon, click the Install Windows tab, and then click the Install from Disk option. option.

2. In the Install from Disk dialog box, click the Browse button and specify the tools\reskit\netadmin\poledit directory on the Windows 9X installation CD.

3. Click the Confirm button and then click the Confirm button in the dialog box again.

4. In the Install from Disk dialog box, select the System Policy Editor and Group Policy check boxes, and then click the Install button.

After the installation is complete, click the Run command item, type poledit, and then click the Confirm button. Administrators can use the System Policy Editor in two different ways: the registry way and the policy file way.

1. Use the System Policy Editor as a registry. From the File menu in the System Policy Editor, click Open Registry Editor, and then double-click the appropriate local user or local computer icon. This depends on which part of the registry you want to edit. When using the registry method, you can directly edit the registry of the local or remote computer. In this way, the changes made will be reflected immediately. After making changes, you must shut down and restart the computer for the changes to take effect.

2. Use the System Policy Editor as a policy file. From the File menu in the System Policy Editor, click New or Open to open a policy file. When using the policy file method, you can create and modify system policy files (POLs) for use on other computers, in which the registry is indirectly modified. This change is reflected when the policy file is downloaded when the user logs on. When editing settings as a policy file, clicking on a registry option reveals one of three possible states: checked, cleared, or grayed out. Whenever an option is selected, it will cycle through the next possible states, unlike selecting a standard checkbox. A standard checkbox has only two options: checked or cleared.

If a setting value requires additional information, an edit control will appear at the bottom of the Default User Properties dialog box. Typically, if a policy is checked and you do not want to force it to be used, you should clear the checkbox to cancel the policy.

(2) Windows 2000/XP/2003 Group Policy Console

If you are on a Windows 2000/XP/2003 system, you will already have a Group Policy program installed by default, so in the Start menu, click the Run command. "Run" command item, enter gpedit.msc and OK, you can run the program Using the above method, open the Group Policy object is the current computer, and if you need to configure other computers Group Policy object, you need to open the Group Policy as a stand-alone console management program, the specific steps are as follows:

1) Open the Microsoft Management Console (in the "Start" menu of the "Run" dialog box directly enter MMC and enter to run the console program).

2) On the File menu, click Add/Remove Management Units.

3) On the Standalone tab, click Add.

4) In the Available Standalone Units dialog box, click Group Policy, and then click Add.

5) In the Select Group Policy Objects dialog box, click Local Computer to edit the Local Computer object, or find the desired Group Policy object by clicking Browse. Group Policy object.

6) Click Finish, click Close, and then click OK. The Group Policy Management Unit opens with the Group Policy object you want to edit.

For a computer system that does not contain a domain, the screen in step 5 above has only the Computers tab and no other tab items.

With the above method, we can use the powerful network configuration features of Windows 2000/XP/2003 Group Policy system to make the administrator's work easier and more efficient.

In the above we introduced the Windows 9X policy editor configuration items have "selected, clear, gray" three states, Windows 2000/XP/2003 Group Policy Management Console also has three states, but the name has changed. They are: Enabled, Unconfigured, and Disabled.