Hello Dhiraj,
it's always a kind of risk to put something into production without testing
- even with good guidance there might be small issues which may lead to big
results.
That said - implementing a new Policy Extension in GP is pretty easy. First,
copy the ADM to the ADM-Files in the Group Policy Object in Sysvol. They are
referenced by GUID ({xxx-xxx-xxx-xxx}) there - you are able to find out the
GUID of your GPO using GPMC. After you copied the ADM-File there, open the
Group Policy. For custom ADMs you have to adjust the Filter (in the View
Menu of the GP-Object Editor): Select the Administrative Template Node
underneath either User or Computer Configuration (prop. Computer in your
case), then go into the View Menu and click "Filter". Unselect "Only show
policy settings that can be fully managed".
Afterwards you should be able to find your policy setting and you are able
to configure it.
I'd do this in a separate GPO for testing, and remove the Right (in
Security, make sure that you remove the right and do _not_ deny it) of
Authenticated Users to apply the policy. Afterward enter your own
computeraccount and give him the right to apply the policy - just to make
sure that you are testing it before. If it works on your computer you can
reset the rights be allowing Authenticated Users to apply it again and
remove your computer account from the security settings. Now they will apply
to all computer accounts underneath the level (domain, OU, site) where you
linked the GPO.
Gruesse - Sincerely,
Ulf B. Simon-Weidner
Profile &
Publications: http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-
B489-F2F1214C811D
Weblog: http://msmvps.org/UlfBSimonWeidner
Website: http://www.windowsserverfaq.org
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Haritwal, Dhiraj
Sent: Samstag, 27. Januar 2007 09:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Disable CD ROM through GP
If anyone had done the same, kindly guide me...
Bcoz right now donot have this mucb of time.........
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley,
CPA aka Ebitz - SBS Rocks [MVP]
Sent: Saturday, January 27, 2007 1:10 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Disable CD ROM through GP
Why not setting up a test network/machine in VirtualPC/Vmware?
Haritwal, Dhiraj wrote:
>
> Hi All,
>
> I want to disable CD ROM on all client machines through GP. I found
> the KB http://support.microsoft.com/kb/555324 & created the attached
> test.adm file. Actually I don't have any testing machine where I can
> test this *adm *file. Can anybody try & tell me the complete process
> to enable it. Also tell me where it will reflect the changes whether
> in registry or it will create that option in GP to disable/enable CD
ROM.
>
> Dhiraj Haritwal
>
>
------------------------------------------------------------------------
>
> This email is confidential and intended only for the use of the
> individual or entity named above and may contain information that is
> privileged. If you are not the intended recipient, you are notified
> that any dissemination, distribution or copying of this email is
> strictly prohibited. If you have received this email in error, please
> notify us immediately by return email or telephone and destroy the
> original message. - This mail is sent via Sony Asia Pacific Mail
Gateway.
>
------------------------------------------------------------------------
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
-------------------------------------------------------------------
This email is confidential and intended only for the use of the individual
or entity named above and may contain information that is privileged. If you
are not the intended recipient, you are notified that any dissemination,
distribution or copying of this email is strictly prohibited. If you have
received this email in error, please notify us immediately by return email
or telephone and destroy the original message. - This mail is sent via Sony
Asia Pacific Mail Gateway.
-------------------------------------------------------------------
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
