>Not sure where the 6/19/2003 version comes from

Checked a W2KSP4 box and that's the stamp it has FWIW....

Someone editing your GPO's from a 2K box???

If you haven't seen it, the "Administrative Templates Background" section in the GPMC 
whitepaper was very enlightening to me. 

Administrative Templates and Group Policy Object Editor

*       By default, if the version of the .adm file found on the local computer is 
newer (based on the time stamp of the file) than the version on the Sysvol, the local 
version is copied to the Sysvol and is then used to display the settings. This 
behavior can be controlled by a policy setting. 

Administrative Templates and GPMC

GPMC handles administrative templates for GPOs differently than the Group Policy 
Object Editor. The change in behavior was a deliberate design decision to simplify the 
behavior with .adm files, to avoid complications with .adm file version conflicts, and 
to improve performance in GPMC.

To generate a report, GPMC looks by default in the following locations for .adm files:
*       %Windir%\inf on the local computer where GPMC is running. If an .adm file is 
found, it is used, regardless of its timestamp.
*       If the .adm file is not found, GPMC looks in the GPO's folder on SYSVOL 




-----Original Message-----
From: Parker, Edward [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 24, 2004 12:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPOs and ICF


{formatted correctly, sorry)


I think I may have partially figured this out.  When I created a new GPO...


The SYSTEM ADM file has a modified date of 8/21/2002 (assume original XP)  and I see 
the ICF.

The SYSTEM ADM file from 2003 has a modified date of 3/25/2003 and I see the ICF.

The SYSTEM ADM file missing the ICF info has a modified date of 6/19/2003 and I DON'T 
see the ICF.



Not sure where the 6/19/2003 version comes from.   I have the GPMC 1.01 installed. 


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 24, 2004 12:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPOs and ICF


This I'm not sure of, but let me hazard a guess:
 
IF you are looking for this:
MACHINE Administrative Templates\Network\Network Connections Prohibit use of Internet 
Connection Firewall on your DNS domain network 
 
The "Group Policy Settings Reference" Version 1.01 says this option is ONLY available 
on: "At least Microsoft Windows XP Professional or Windows Server 2003"
 
Sincerely,

D�j� Ak�m�l�f�, MCSE MCSA MCP+I
Microsoft MVP - Active Directory
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about Yesterday?  -anon

________________________________

From: [EMAIL PROTECTED] on behalf of Parker, Edward
Sent: Tue 2/24/2004 8:11 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] GPOs and ICF


When I edit a GPO on an OU...I do not see the ICF GPOs listed.  They are suppose to be 
under....
 
Computer | Admin Template | Network | Network and Dial up connections
 
All I see is Prohibit connection sharing....Not any of the ICF ones?
 
Any suggestion on how these are loaded?
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to