That is
interesting. How do you create a ADM, do you just open up the existing
ADM in notepad and just copy and paste into a new notepad file and save it
with a ADM extension?
-----Original
Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Tuesday, November 23, 2004 8:17
PM
To:
[EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
Justin-
Its
possible that if a newer version of inetcorp.adm comes out that does not
support these same settings, then the setting you have in that GPO could be
orphaned. One quick and easy way to avoid that is to copy and paste the
setting you are interested in into a stand-alone custom ADM and then you
always have that available outside of any MS ones.
Darren
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Salandra, Justin
A.
Sent: Tuesday, November
23, 2004 12:57 PM
To:
[EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
Right, I
deleted that part from the ADM (don�t worry I created a backup of it) and
changed the #if version <=2 to #if version >=2 and now when I load the
adm file I get the one and only setting I want to configure. However,
what happens when this adm file gets updates during future upgrades?
Will my settings be lost?
-----Original
Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Darren
Mar-Elia
Sent: Tuesday,
November 23, 2004 3:42 PM
To:
[EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
That
logic is there to prevent you from using the settings within that ADM if the
GP Editor version is greater than or less than a certain value. So, I think NT
4 poledit is version 2, Win2K GP Editor is 3, XP is 4, etc. So, if you try to
edit the original file from Win2K, instead of seeing the settings available in
that file, it gives you the text about it not being usable on Win2K, which is
found in this section:
CATEGORY
!!IEAKOnly
POLICY !!IEAKOnlyPolicy
KEYNAME
"Software\Policies"
PART !!IEAKOnly_Tip1 TEXT
END PART
PART !!IEAKOnly_Tip2 TEXT
END PART
END POLICY
END
CATEGORY
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Salandra, Justin
A.
Sent: Tuesday, November
23, 2004 12:33 PM
To:
[EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
What
does doing that do exactly?
-----Original
Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Darren
Mar-Elia
Sent: Tuesday,
November 23, 2004 2:54 PM
To:
[EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
Just
edit the ADM in notepad--its on the first line and you just change the > to
<
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Salandra, Justin
A.
Sent: Tuesday, November
23, 2004 11:01 AM
To:
[EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
How do
you change this in the adm file?
-----Original
Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Darren
Mar-Elia
Sent: Tuesday,
November 23, 2004 1:46 PM
To:
[EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
Ok. I
see what the issue is. In the default version of this file, the first line in
the ADM says:
#if
version >= 3
and then
it displays the message about not working with Win2K. What I did, without
realizing it, is change that to
#if
version <= 3
Essentially
they are trying to tell you that the settings haven't been tested with Win2K
and above and indeed some of them don't work (such as TIF size). But the one
you need should work just fine.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Salandra, Justin
A.
Sent: Tuesday, November
23, 2004 10:34 AM
To: Darren
Mar-Elia; [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
I am
loading it from a Windows XP SP2 PC using the GPMC SP1 to a Windows 2000
Native Forest.
-----Original
Message-----
From: Darren
Mar-Elia [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 23, 2004 1:27
PM
To:
[EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
What
version of Windows are you loading it on? When I load it into XP, it works
fine.
-----Original
Message-----
From:
Salandra, Justin A. [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 23, 2004 10:17
AM
To:
[EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: [gptalk] RE: [ActiveDir]
Configure "Check for newer versions of stored pag es"
When I
do that I get
The
inetcorp.adm file is not for Windows 2000. These settings will not be
displayed.
-----Original
Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-Elia
Sent: Tuesday,
November 23, 2004 11:53 AM
To: [EMAIL PROTECTED];
[EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure
"Check for newer versions of stored pag es"
Well
since those preference mode settings are just ADMs, you can simply load
inetcorp.adm "out of band" within the Admin. Templates section and you
should be good to go.
From:
[EMAIL PROTECTED] on behalf of Salandra, Justin
A.
Sent: Tue 11/23/2004
8:46 AM
To:
[EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure
"Check for newer versions of stored pag es"
However I cannot
configure TIF to check for newer version of stored pages on every visit
unless I am in preference mode. Do you know of another
way?
-----Original
Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-Elia
Sent: Tuesday,
November 23, 2004 11:31 AM
To:
[EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure
"Check for newer versions of stored pag es"
Yes, you've got it right and it
makes total sense. The combination of IE Maintenance and IE related ADM
lockdown is the correct approach for controlling IE. However, if you really
don't want the user to change their IE settings you don't really need
preference mode. It is really meant for "suggestive" settings rather than
mandatory ones.
From:
[EMAIL PROTECTED] on behalf of Salandra, Justin
A.
Sent: Tue 11/23/2004
7:50 AM
To:
[EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure
"Check for newer versions of stored pag es"
OK, lets try this, If I configure in Preference mode
all the URL's, the
Security Settings, Privacy settings and Advanced
Settings, they all get
applied one time. Preference mode basically
means "I would like for you
to have these settings but feel free to
change them". Since we then
cannot enforce these settings, we then
used the ADM templates to lock
down the settings that we have
configured. For example, URL for
homepage is configured in
Preference Mode and then in the ADM we
configure the ADM to disable
changing the homepage to lock it down.
Does this make
sense?
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Salandra,
Justin A.
Sent: Tuesday, November 23, 2004 8:57
AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure
"Check for newer versions of stored
pag es"
SO let me see if I
understand you here. If I am in Preference mode and
I configure IE
to check for newer versions automatically and I configure
the home URL in
the same policy, will users be able to change the home
URL if I locked it
down in the Administrative Templates section of the
policy? If the
URL does happen to get changed on the local machines IE
Properties will
the policy change it back? I read somewhere that in
Preference
Mode, the policy will apply only once and then each time you
change a
setting. So if the Home page changes, the home page will not
be
reset unless you actually modify the policy. Is this
correct?
If I have a separate policy just for preference mode of the
IE
Maintenance section and only configure the advanced settings that
are
added by doing this and I have my regular policy that modifies all
other
aspects of IE Maintenance, will inheritance work and the client get
the
settings from both policies with nothing being
overwritten?
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Darren Mar-Elia
Sent: Monday, November 22, 2004 9:08
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure
"Check for newer versions of stored
pag es"
Sometimes I really
wonder who writes some of these KB articles--and do
they get vetted for
readability? I agree with you Justin. Totally
non-sensical. I'm not sure
what they're trying to say but the bottom
line is, when you use
preference mode, you have to additionally lockdown
the areas that you
specify in IE Maintenance using Admin. Template
policy if you really
don't want the user to change the setting after its
initially been
delivered.
In any case, what happens when you enable Preference mode
is you get
this additional set of ADMs that are loaded into the IE
Maintenance
namespace. Specifically inetcorp.adm and inetset.adm.
However, these
ADMs haven't been updated in a while and in the testing
I've done,
certain things just don't work in IE6--like specifying IE TIF
size.
However, I did just test the setting you are interested in
within
inetcorp.adm and it works just fine on IE
6.
Darren
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Salandra,
Justin A.
Sent: Monday, November 22, 2004 1:56
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure
"Check for newer versions of stored
pag es"
http://support.microsoft.com/kb/274846
An
administrator must also combine GPOs, an organizational unit, a user,
or
a computer by implementing both a Preference mode and a MAINTENANCE
MODE
GPO.
I don't understand this comment in the article.
Does
anyone have any insight?
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Salandra,
Justin A.
Sent: Monday, November 22, 2004 3:54
PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure
"Check for newer versions of stored
pag es"
For
IE
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Mulnick, Al
Sent: Monday, November 22, 2004 3:02 PM
To:
[EMAIL PROTECTED]
Subject: RE: [ActiveDir] Configure "Check
for newer versions of stored
pag es"
For IE or some other
app?
-----Original Message-----
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Salandra,
Justin A.
Sent: Monday, November 22, 2004 2:35
PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Configure
"Check for newer versions of stored
pages"
How can you configure
"Check for newer versions of stored pages" to
Automatically through Group
Policy?
Justin A. Salandra, MCSE
Senior Network
Engineer
Catholic Healthcare System
212.752.7300 -
office
917.455.0110 - cell
[EMAIL PROTECTED]
List
info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List
info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
