GPO policy store and creating new policy from ADMX file?

Hi, all! Server environment is Win2k8 R2 in Active Directory domain; workstation is Windows 7.

Here's the deal: I need to create a new policy to set a given rule for a feature of Outlook 2010. Specfically, I need to force spell check on for all domain users. This particular policy can be set, according to this MS document: https://technet.microsoft.com/en-us/library/gg153528%28v=office.14%29.aspx. At my current job we do not have a central store for policies, so I created one per this MS document: https://technet.microsoft.com/en-us/library/cc179081%28v=office.14%29.aspx#create_GPO (see attached file gpme2.png). I created this folder on our main domain controller "DCN". Next, I ran GPME and created a new policy called "sbTest" (this step yields identical results whether I use my Win7 workstation or do the work on the domain controller itself).

This is where the disconnect in my brain happens. First, after rt-clicking on my new test policy, I *never* see anything associated with the single ADMX file for Outlook2010 that I copied to the new "store" (see attached file gpme1.png). The Administrative Templates section of both Computer Config and User Config never contain anything whatsoever.

Second, I'm assuming that at some point I need to actually identify WHICH ADMX template I want the new policy to contain, correct? Where is that set? I'm lost here. Any suggestions would be appreciated.

SteveInNV



You didn't set up your central store properly so, yes, the group policy editor will be empty.

1) admx files go in the policy definitions folder. You have your file one level lower, in a language directory. That's wrong.

2) each admx file has a set of adml files. *Those* go in their respective language directories. So there is an English adml file that goes in en-us

3) The group policy editor reads *allo* the files in the central store and presents all of their associated settings. You do not select a specific admx file. As long as the admx and adml files are present, they are added to the editor as a collective whole.

So if you fix things up, but only have the outlook asmx/adml files in the store, you'll only see outlook settings. No windows settings. No excel settings. Nada. But if you copy other files over, the settings they expose will appear in the editor. You usually want to copy *at least* the latest OS settings from a client or server's local store so you get those settings in the editor.



You didn't set up your central store properly so, yes, the group policy editor will be empty.

1) admx files go in the policy definitions folder. You have your file one level lower, in a language directory. That's wrong.

2) each admx file has a set of adml files. *Those* go in their respective language directories. So there is an English adml file that goes in en-us

3) The group policy editor reads *allo* the files in the central store and presents all of their associated settings. You do not select a specific admx file. As long as the admx and adml files are present, they are added to the editor as a collective whole.

So if you fix things up, but only have the outlook asmx/adml files in the store, you'll only see outlook settings. No windows settings. No excel settings. Nada. But if you copy other files over, the settings they expose will appear in the editor. You usually want to copy *at least* the latest OS settings from a client or server's local store so you get those settings in the editor.



I would personally reference the Active Directory team blog to ensure that you have created the Central Store accordingly.

Configure Active Directory Central Store.
http://blogs.technet.com/b/askpfeplat/archive/2011/12/12/how-to-implement-the-central-store-for-group-policy-admin-templates-completely-hint-remove-those-adm-files.aspx

Will.



Just creating the folder is not enough, you also need to copy all of the ADMX (Settings) and ADML (Display Language) over. Be sure to download the latest files for your Office version.

For Outlook 2013: http://www.microsoft.com/en-us/download/details.aspx?id=35554



Thanks for responding, guys! The various tech notes and blog posts haven't been terribly specific, hence my placing JUST the one ADMX files that I need (Outlook 2010) in the "en-us" folder.

One thing I want to be careful of: we have numerous policies already in place, and the LAST thing I need at this point is implementing a central store (which was never established at my new workplace) overwriting any existing policies already in place and operating correctly.

So, I'll read over the document recommended by Will above, and see if I can get the Office 2010 templates (all of them, including the Language files) install in the store correctly.

Thanks for helping out!



When you are creating the central store you are not overwriting any policies (these are stored in AD and SYSVOL). You are simply providing a central and convenient location for the ADMX files. Without the central store the files are retrieved from the workstation where you are running the group policy console.

Share this

Related Posts

There was an error in this gadget