Need help debugging custom ADM file

[Anthony Morris]

Trying to learn to create custom ADM files and working with the
following simple example. Everything works like a champ for the
"Hiding drives" portion. However, the setting for the proxy server
appears blank (No chance to choose enable or disable). Simply
changing the Keyname to match the one for the drives, makes it appear
but that obviously won't change the registry key I want. What am I
doing wrong?

------------------------


CATEGORY !!Shell
CATEGORY "Proxy"
POLICY !!PROXY1
KEYNAME "Software\Microsoft\Windows\CurrentVersion\Internet
Settings"
VALUENAME "AutoConfigURL"
VALUEON http://proxy1.mysite.net/proxy.pac
VALUEOFF http://proxy2.mysite.net/proxy.pac
END POLICY
END CATEGORY

CATEGORY !!Restrictions
POLICY !!HideDrives
KEYNAME Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
VALUENAME "NoDrives"
VALUEON NUMERIC 67108863
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
END CATEGORY

[STRINGS]
PROXY1="Turn on Proxy server 1"
RESTRICTIONS="Customized settings"
HIDEDRIVES="Hide the drives"
SHELL="My site"

 

[Mark Renoden [MSFT]]

Hi Anthony

Because the registry key for the proxy does not contain /policies/ it's seen
by the policy editor as not being a true policy. In other words, this will
be a setting which permanently changes the registry and it won't be removed
if you delete the policy. This is known as tattoo-ing.

You can get around this by adding the /policies/ to the key path ...

323639 HOW TO: Create Custom Administrative Templates in Windows 2000
http://support.microsoft.com/?id=323639

If you're not concerned about it being tattood, you can choose "filtering"
from the view menu in the policy editor and deselect "Only show policy
settings that can be fully managed" (windows 2003 - might be slightly
different for 2000).

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Anthony Morris]

Hi Anthony

Because the registry key for the proxy does not contain /policies/ it's seen
by the policy editor as not being a true policy. In other words, this will
be a setting which permanently changes the registry and it won't be removed
if you delete the policy. This is known as tattoo-ing.

You can get around this by adding the /policies/ to the key path ...

323639 HOW TO: Create Custom Administrative Templates in Windows 2000
http://support.microsoft.com/?id=323639

If you're not concerned about it being tattood, you can choose "filtering"
from the view menu in the policy editor and deselect "Only show policy
settings that can be fully managed" (windows 2003 - might be slightly
different for 2000).

Kind regards

I don't mean to be dense, but I don't think I get it. I mean I get
what you are saying about why it doesn't work, but I don't get the
solution. I just simply tack "/policies" to the end of my key? Let
me try with an example. Suppose I have an in-house application that
stores values in HKEY_CURRENT_USER\SOFTWARE\CustomApp\Settings

You are saying I need to build the policy to change
HKEY_CURRENT_USER\SOFTWARE\Policies\CustomApp\Settings

and then Group Policy/XP will handle the rest?

(For the record, we are using AD2003 w/ XP machines, I just couldn't
find a better group to post to.)

 

[Mark Renoden [MSFT]]

Hi Anthony

That's how I understand it. It's worked at least for me that way in the
past.

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[JHP]

Part of 323639 HOW TO: Create Custom Administrative Templates in Windows
2000...

Note: If your new policy setting does not appear in the right pane as you
expect, right-click the new Desktop Settings node, point to View, and then
click to clear the check mark that is beside the Show Policies Only menu
item.

HTH