RE: [ActiveDir] Configuring SNMP via GPO

[Mark Parris]

Jeff,   This should do the trick – been using it for years – servers that the GPO is applied to will need a reboot after the import.   Save as SNMP.adm   Mark   /SNIP ; ;Custom ADM Settings ;   CLASS MACHINE CATEGORY "Custom Windows Settings"             CATEGORY "Server Settings"                         CATEGORY "SNMP"                                     POLICY "SNMP Communties"                                     EXPLAIN !!SNMPCommunities                                     KEYNAME "System\CurrentControlSet\Services\SNMP\Parameters\ValidCommunities"                                                   PART "Public community" DROPDOWNLIST NOSORT                                                             VALUENAME "public"                                                             ITEMLIST                                                                         NAME "Remove public community" VALUE DELETE DEFAULT                                                                         NAME "NONE" VALUE NUMERIC 1                                                                         NAME "NOTIFY" VALUE NUMERIC 2                                                                         NAME "READ-ONLY" VALUE NUMERIC 4                                                             END ITEMLIST                                                 END PART                                                        PART "Alert community" DROPDOWNLIST NOSORT                                                             VALUENAME "alertsnmp"                                                             ITEMLIST                                                                         NAME "Not added" VALUE DELETE DEFAULT                                                                         NAME "NONE" VALUE NUMERIC 1                                                                         NAME "NOTIFY" VALUE NUMERIC 2                                                                         NAME "READ ONLY" VALUE NUMERIC 4                                                                         NAME "READ WRITE" VALUE NUMERIC 8                                                             END ITEMLIST                                                 END PART                                                 PART "Monitor community" DROPDOWNLIST NOSORT                                                             VALUENAME "monsnmp"                                                             ITEMLIST                                                                         NAME "Remove monitor community" VALUE DELETE                                                                         NAME "NONE" VALUE NUMERIC 1                                                                         NAME "NOTIFY" VALUE NUMERIC 2                                                                         NAME "READ ONLY" VALUE NUMERIC 4 DEFAULT                                                                         NAME "READ WRITE" VALUE NUMERIC 8                                                             END ITEMLIST                                                 END PART                                                 PART "Manage community" DROPDOWNLIST NOSORT                                                             VALUENAME "mansnmp"                                                             ITEMLIST                                                                         NAME "Remove manage community" VALUE DELETE                                                                         NAME "NONE" VALUE NUMERIC 1                                                                         NAME "NOTIFY" VALUE NUMERIC 2                                                                         NAME "READ ONLY" VALUE NUMERIC 4                                                                         NAME "READ WRITE" VALUE NUMERIC 8 DEFAULT                                                             END ITEMLIST                                                 END PART                                     END POLICY                         END CATEGORY                      END CATEGORY END CATEGORY       [strings] SNMPCommunities="Allows the SNMP Communities for Read & Write to be set"   /ENDSNIP From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Williams, Robert Sent: 26 September 2006 19:55 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Configuring SNMP via GPO   Jeff,   I didn’t see a very easy way to do what you’re asking ‘out of the box’.  You could check out RegToADM which will take an exported reg file and make an ADM file for you.  It could help you with configuring your custom ADM file.  I tried it with some sample settings and it seems like it could work for you.  I’d probably change the ADM file it creates a bit to clean up the format and make it more readable once you add it to the GPO.  Of course, test it thoroughly.   Remember you have to enable the GPO Editor to see these keys as they are preferences rather than policies which also means that once the server gets the settings, it won’t automatically undo itself if you remove the GPO.   http://yizhar.mvps.org/ Have a great day! Robert Williams From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Cothern, Jeffrey D Mr CTR USSOCOM HQ Sent: Tuesday, September 26, 2006 12:35 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Configuring SNMP via GPO   I have been looking at a way to ensure that SNMP is configured on all of our servers the same way.  Looking at the GPO's there is a shortfall.     We have a custom community name that we set with the allowed managers that you can look at on the security tab of SNMP service.   We need a Custom Community name under TRAPS tab of the SNMP service with the allowed destinations.  The only current GPO setting I can find just adds destinations for the "Public" community which we are not allowed to use here.     Anyone know of a custom ADM template that would allow the creation/setup of Traps for a custom community.   Jeff   2006-09-26, 15:20:31 The information contained in this e-mail message and any attachments may be privileged and confidential. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to this e-mail and delete the message and any attachments from your computer.