RE: [ActiveDir] Configure "Check for newer versions of stored pag es"

[Salandra, Justin A.]

Title: Message

That is interesting.  How do you create a ADM, do you just open up the existing ADM in notepad and just copy and paste into a new notepad file and save it with a ADM extension?   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 8:17 PM To: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es"   Justin- Its possible that if a newer version of inetcorp.adm comes out that does not support these same settings, then the setting you have in that GPO could be orphaned. One quick and easy way to avoid that is to copy and paste the setting you are interested in into a stand-alone custom ADM and then you always have that available outside of any MS ones.   Darren   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 12:57 PM To: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es" Right, I deleted that part from the ADM (don’t worry I created a backup of it) and changed the #if version <=2 to #if version >=2 and now when I load the adm file I get the one and only setting I want to configure.  However, what happens when this adm file gets updates during future upgrades?  Will my settings be lost?   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 3:42 PM To: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es"   That logic is there to prevent you from using the settings within that ADM if the GP Editor version is greater than or less than a certain value. So, I think NT 4 poledit is version 2, Win2K GP Editor is 3, XP is 4, etc. So, if you try to edit the original file from Win2K, instead of seeing the settings available in that file, it gives you the text about it not being usable on Win2K, which is found in this section:   CATEGORY  !!IEAKOnly       POLICY !!IEAKOnlyPolicy         KEYNAME "Software\Policies"           PART !!IEAKOnly_Tip1  TEXT         END PART           PART !!IEAKOnly_Tip2  TEXT         END PART     END POLICY   END CATEGORY   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 12:33 PM To: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es" What does doing that do exactly?   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 2:54 PM To: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es"   Just edit the ADM in notepad--its on the first line and you just change the > to <   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 11:01 AM To: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es" How do you change this in the adm file?   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 1:46 PM To: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es"   Ok. I see what the issue is. In the default version of this file, the first line in the ADM says:   #if version >= 3   and then it displays the message about not working with Win2K. What I did, without realizing it, is change that to   #if version <= 3    Essentially they are trying to tell you that the settings haven't been tested with Win2K and above and indeed some of them don't work (such as TIF size). But the one you need should work just fine.         From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 10:34 AM To: Darren Mar-Elia; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es" I am loading it from a Windows XP SP2 PC using the GPMC SP1 to a Windows 2000 Native Forest.   -----Original Message----- From: Darren Mar-Elia [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 23, 2004 1:27 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es"   Justin- What version of Windows are you loading it on? When I load it into XP, it works fine.   Darren -----Original Message----- From: Salandra, Justin A. [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 23, 2004 10:17 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [gptalk] RE: [ActiveDir] Configure "Check for newer versions of stored pag es" When I do that I get   The inetcorp.adm file is not for Windows 2000.  These settings will not be displayed.   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 11:53 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es"   Well since those preference mode settings are just ADMs, you can simply load inetcorp.adm "out of band" within the Admin. Templates section and you should be good to go.   From: [EMAIL PROTECTED] on behalf of Salandra, Justin A. Sent: Tue 11/23/2004 8:46 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" However I cannot configure TIF to check for newer version of stored pages on every visit unless I am in preference mode. Do you know of another way?   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Tuesday, November 23, 2004 11:31 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es"   Justin- Yes, you've got it right and it makes total sense. The combination of IE Maintenance and IE related ADM lockdown is the correct approach for controlling IE. However, if you really don't want the user to change their IE settings you don't really need preference mode. It is really meant for "suggestive" settings rather than mandatory ones.   Darren   From: [EMAIL PROTECTED] on behalf of Salandra, Justin A. Sent: Tue 11/23/2004 7:50 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" OK, lets try this, If I configure in Preference mode all the URL's, the Security Settings, Privacy settings and Advanced Settings, they all get applied one time.  Preference mode basically means "I would like for you to have these settings but feel free to change them".  Since we then cannot enforce these settings, we then used the ADM templates to lock down the settings that we have configured.  For example, URL for homepage is configured in Preference Mode and then in the ADM we configure the ADM to disable changing the homepage to lock it down. Does this make sense? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 8:57 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" SO let me see if I understand you here.  If I am in Preference mode and I configure IE to check for newer versions automatically and I configure the home URL in the same policy, will users be able to change the home URL if I locked it down in the Administrative Templates section of the policy?  If the URL does happen to get changed on the local machines IE Properties will the policy change it back?  I read somewhere that in Preference Mode, the policy will apply only once and then each time you change a setting.  So if the Home page changes, the home page will not be reset unless you actually modify the policy.  Is this correct? If I have a separate policy just for preference mode of the IE Maintenance section and only configure the advanced settings that are added by doing this and I have my regular policy that modifies all other aspects of IE Maintenance, will inheritance work and the client get the settings from both policies with nothing being overwritten? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darren Mar-Elia Sent: Monday, November 22, 2004 9:08 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" Sometimes I really wonder who writes some of these KB articles--and do they get vetted for readability? I agree with you Justin. Totally non-sensical. I'm not sure what they're trying to say but the bottom line is, when you use preference mode, you have to additionally lockdown the areas that you specify in IE Maintenance using Admin. Template policy if you really don't want the user to change the setting after its initially been delivered. In any case, what happens when you enable Preference mode is you get this additional set of ADMs that are loaded into the IE Maintenance namespace. Specifically inetcorp.adm and inetset.adm. However, these ADMs haven't been updated in a while and in the testing I've done, certain things just don't work in IE6--like specifying IE TIF size. However, I did just test the setting you are interested in within inetcorp.adm and it works just fine on IE 6. Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 1:56 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" http://support.microsoft.com/kb/274846 An administrator must also combine GPOs, an organizational unit, a user, or a computer by implementing both a Preference mode and a MAINTENANCE MODE GPO. I don't understand this comment in the article. Does anyone have any insight? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 3:54 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" For IE -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Mulnick, Al Sent: Monday, November 22, 2004 3:02 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" For IE or some other app? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 2:35 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Configure "Check for newer versions of stored pages" How can you configure "Check for newer versions of stored pages" to Automatically through Group Policy? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info   : http://www.activedir.org/mail_list.htm List FAQ    : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/