I think this is what Darren was getting at :-] The standard Administrative Templates shipped with Windows only contain true policies, as distinct from preferences
The Group Policy Object Editor does not show preferences. If you add an .adm file that contains preferences rather than policy settings, you will have to clear the Only show policy settings that can be fully managed check box on the Filtering dialog box under the View menu of Group Policy Object Editor, otherwise the settings will not be visible in the console. ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 10:49 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" Tick the box to show preferences? What is this? I thought that if I loaded the adm into admin tools then I would not have to use the preference mode? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 1:32 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" Justin- I am replying to this on two different lists with two different ids--not working :-) So, I can get this ADM to load just fine on a GPO from XP. Of course, you have to tick the box to show preferences, since these are all preferences, but it does work. ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 10:17 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" When I do that I get The inetcorp.adm file is not for Windows 2000. These settings will not be displayed. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 11:53 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" Well since those preference mode settings are just ADMs, you can simply load inetcorp.adm "out of band" within the Admin. Templates section and you should be good to go. ________________________________ From: [EMAIL PROTECTED] on behalf of Salandra, Justin A. Sent: Tue 11/23/2004 8:46 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" However I cannot configure TIF to check for newer version of stored pages on every visit unless I am in preference mode. Do you know of another way? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 11:31 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" Justin- Yes, you've got it right and it makes total sense. The combination of IE Maintenance and IE related ADM lockdown is the correct approach for controlling IE. However, if you really don't want the user to change their IE settings you don't really need preference mode. It is really meant for "suggestive" settings rather than mandatory ones. Darren ________________________________ From: [EMAIL PROTECTED] on behalf of Salandra, Justin A. Sent: Tue 11/23/2004 7:50 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" OK, lets try this, If I configure in Preference mode all the URL's, the Security Settings, Privacy settings and Advanced Settings, they all get applied one time. Preference mode basically means "I would like for you to have these settings but feel free to change them". Since we then cannot enforce these settings, we then used the ADM templates to lock down the settings that we have configured. For example, URL for homepage is configured in Preference Mode and then in the ADM we configure the ADM to disable changing the homepage to lock it down. Does this make sense? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 8:57 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" SO let me see if I understand you here. If I am in Preference mode and I configure IE to check for newer versions automatically and I configure the home URL in the same policy, will users be able to change the home URL if I locked it down in the Administrative Templates section of the policy? If the URL does happen to get changed on the local machines IE Properties will the policy change it back? I read somewhere that in Preference Mode, the policy will apply only once and then each time you change a setting. So if the Home page changes, the home page will not be reset unless you actually modify the policy. Is this correct? If I have a separate policy just for preference mode of the IE Maintenance section and only configure the advanced settings that are added by doing this and I have my regular policy that modifies all other aspects of IE Maintenance, will inheritance work and the client get the settings from both policies with nothing being overwritten? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Monday, November 22, 2004 9:08 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" Sometimes I really wonder who writes some of these KB articles--and do they get vetted for readability? I agree with you Justin. Totally non-sensical. I'm not sure what they're trying to say but the bottom line is, when you use preference mode, you have to additionally lockdown the areas that you specify in IE Maintenance using Admin. Template policy if you really don't want the user to change the setting after its initially been delivered. In any case, what happens when you enable Preference mode is you get this additional set of ADMs that are loaded into the IE Maintenance namespace. Specifically inetcorp.adm and inetset.adm. However, these ADMs haven't been updated in a while and in the testing I've done, certain things just don't work in IE6--like specifying IE TIF size. However, I did just test the setting you are interested in within inetcorp.adm and it works just fine on IE 6. Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 1:56 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" http://support.microsoft.com/kb/274846 An administrator must also combine GPOs, an organizational unit, a user, or a computer by implementing both a Preference mode and a MAINTENANCE MODE GPO. I don't understand this comment in the article. Does anyone have any insight? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 3:54 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" For IE -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Monday, November 22, 2004 3:02 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" For IE or some other app? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 2:35 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Configure "Check for newer versions of stored pages" How can you configure "Check for newer versions of stored pages" to Automatically through Group Policy? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
