Script Add/Remove Administrative Templates for LGPO

[Guest]

Is it possible to add/remove adminstrative templates for the local group policy object on a windowsXP or Windows2000 machine

We are attempting to automate the configuration of our SUS policies, but we do not have Active directory in place. The only way we have been able to do this is come up with a standard Registry.pol file on one machine, then copy it to all other machines, however it appears that if a PC doesnt have the wuau.adm administrative template "added" throught the gpedit.msc gui, it ignores that part of the Registry.Pol file and doesnt apply the changes to the registry.

 

[Roger Abell]

What you are seeing makes sense, that it will ignore data
in the machine's registry.pol for which the admin template
extension does not have a template.
I do not know of a way to get around the manual add/remove
template within the GP editor.
What I have done in a similar situation to yours is to use
script that simply creates the reg entries and plugs the desired
values directly into the "policies" stucture of the registry.
The autoupdate client does obey these, and they will persist
up to the point when someone does import the wuau.adm
template so that the policy engine begins to overwrite them.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

Is it possible to add/remove adminstrative templates for the local group

policy object on a windowsXP or Windows2000 machine?

We are attempting to automate the configuration of our SUS policies, but

we do not have Active directory in place. The only way we have been able to
do this is come up with a standard Registry.pol file on one machine, then
copy it to all other machines, however it appears that if a PC doesnt have
the wuau.adm administrative template "added" throught the gpedit.msc gui, it
ignores that part of the Registry.Pol file and doesnt apply the changes to
the registry.