Go Back   Computer Forums > General Computing > Server Administration
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 08-06-2010, 03:14 PM   #1
In Runtime
 
thompatry's Avatar
 
Join Date: Feb 2010
Posts: 145
Default ADM vs. ADMX

I work for a College Computer Tech office and I working on just trying to keep group policy simple so others can come in and read and understand what is going on. Well on top of that, we are soon getting ready to deploy Windows 7 in our operation. We do have a few testing machines out there so we can determine the bugs but otherwise, no one has seen it but our dept.

Well I was just curious if ADMX will be read OK by Windows XP or will I have to use both until we are completely off of XP?
__________________

thompatry is offline   Reply With Quote
Old 08-07-2010, 04:46 PM   #2
Site Team
 
root's Avatar
 
Join Date: Mar 2004
Posts: 7,999
Default Re: ADM vs. ADMX

the answer is no.
admx won't be read by XP or 2003.

your choice is to use both, or stick with ADM until you're completely off XP.
__________________

__________________
I didn’t fight my way to the top of the food chain to be a vegetarian…
Im sick of people saying 'dont waste paper'. If trees wanted to live, they'd all carry guns.
"The inherent vice of capitalism is the unequal sharing of blessings; The inherent vice of socialism is the equal sharing of miseries."
root is offline   Reply With Quote
Old 08-09-2010, 09:59 AM   #3
In Runtime
 
thompatry's Avatar
 
Join Date: Feb 2010
Posts: 145
Default Re: ADM vs. ADMX

Then what happens if ADM doesn't all get read by Win 7? For examaple. We have kiosks that we want to disable Control Alt Delete for student users because we don't need these machines locked because it is a kiosk. Well XP understands the rules but Windows 7 doesnt follow what has been set. How do I go about fixing this?

Would I go with two different policies one just for XP (ADM) and one for 7 (ADMX) and put them together in the domain?
thompatry is offline   Reply With Quote
Old 08-11-2010, 10:56 AM   #4
Site Team
 
root's Avatar
 
Join Date: Mar 2004
Posts: 7,999
Default Re: ADM vs. ADMX

yes, publish both ADM and ADMX
__________________
I didn’t fight my way to the top of the food chain to be a vegetarian…
Im sick of people saying 'dont waste paper'. If trees wanted to live, they'd all carry guns.
"The inherent vice of capitalism is the unequal sharing of blessings; The inherent vice of socialism is the equal sharing of miseries."
root is offline   Reply With Quote
Old 08-12-2010, 08:52 PM   #5
In Runtime
 
thompatry's Avatar
 
Join Date: Feb 2010
Posts: 145
Default Re: ADM vs. ADMX

One last quick off the top of my head. What will 7 know what to pull down since there is two of theme there?
thompatry is offline   Reply With Quote
Old 08-13-2010, 10:00 AM   #6
Site Team
 
root's Avatar
 
Join Date: Mar 2004
Posts: 7,999
Default Re: ADM vs. ADMX

it will apply both.

they would be effectively merged, just like if you were applying two regular ADM policies or two ADMX policies.

but remember that deny takes precedence, so if you deny something in the ADM policy then allow it in the ADMX policy it'll still be denied to windows vista and windows 7 machines as they would read both policies.

if you don't like the idea of applying both, and letting the machine merge them, (perhaps because it'll increase the boot time as it will see two policies to apply, then...

you can limit the application either through the use of different OUs to keep windows 7 and XP machines separate in your AD structure.

create an OU for xp machines and apply the ADM policies just to this OU
create an OU for w7 machines and apply the ADMX policies just to this OU.

That's the way that I'd recommend,

or you could change the security settings on the policy to say that some machines have no read access to the policy, (so you let Xp machines see the ADM policy and deny access to windows 7 machines) visa versa for the ADMX policies.

that's the way I wouldn't recommend (because you'll have to create and maintain long lists of machines in the security policy, or in groups), but it is useful if you want to apply a policy to just a single machine inside an OU with lots of machines.

(you can do that per machine, or create groups of machines and put a group in the security settings).
__________________

__________________
I didn’t fight my way to the top of the food chain to be a vegetarian…
Im sick of people saying 'dont waste paper'. If trees wanted to live, they'd all carry guns.
"The inherent vice of capitalism is the unequal sharing of blessings; The inherent vice of socialism is the equal sharing of miseries."
root is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 09:51 PM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0