Members of five security groups. Essentially the Accounting folks. Right now all users in this specific site are just in the OU, not in departmental OUs. If you're about to say that's the way to do it I have an uphill battle in front of me.
From: [email protected] To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Date: Tue, 27 Jan 2015 23:04:23 +0000 I don’t really understand your question It already applies to users in the OU. Now you want to restrict it further – but based on what? From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Chenault Sent: Wednesday, 28 January 2015 9:59 AM To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Alrighty then. Thank you. Last question: I've applied this GPO to a specific OU and with to further restrict it to what groups those users in that OU belong to. I have an LDAP query that works. One article I read cited Targeting but I'm not finding that. From: [email protected] To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Date: Tue, 27 Jan 2015 22:08:42 +0000 Once the Central Store exists, it will always be used by GPMC. But yes, existing GPOs will continue to work. From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Chenault Sent: Tuesday, January 27, 2015 5:05 PM To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Now I'm concerned. Now when I open GPMC and go down to templates ONLY the Excel template is showing. Should I copy the contents of \Policies to the Central Store on the PDCe? NB: they all predate my time here. Do they still work? Gotta know before folks log in tomorrow morning (or tonite if VPN'ed). I _think_ existing GPOs will continue to work, that this change just means Central Store is used from this point forward, but would appreciate someone better versed in this to say so. Or not. From: [email protected] To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Date: Tue, 27 Jan 2015 14:00:07 -0800 All I can say is that in the mass of text that I somehow missed that. There was a point where I was reading in one of those articles and the text was confusing as to what was expected. Back when I worked there I used to reject articles (as I did peer review) that did not give a clear "step 1. Blah Step 2. Blah" where appropriate. From: [email protected] To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Date: Tue, 27 Jan 2015 21:51:59 +0000 It was right there in the MS KB you referenced earlier: To create a Central Store for .admx and .adml files, create a folder that is named PolicyDefinitions in the following location: \\FQDN\SYSVOL\FQDN\policies Thanks Webster From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Chenault Sent: Tuesday, January 27, 2015 3:47 PM To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO BLAM... moved the \PolicyDefinitions under Policies and it worked. Now... why can't MS write articles that are clear like that? I was following the last one to the letter. Problem solved. Thanks all for your help. Date: Tue, 27 Jan 2015 16:27:13 -0500 Subject: Re: [NTSysADM] Adding admin templates to GPO From: [email protected] To: [email protected] I don't have any .opal files in mine, only .admx and .adml, and I created the Policy Definitions folder under Policies, not directly under <domainname>. You shouldn't have to try and manually add them to the clients, they should automatically be used (and enforced). On Tue, Jan 27, 2015 at 12:36 PM, Daniel Chenault <[email protected]> wrote: I need to create a GPO (done) to manage Excel 2013 settings using an LDAP filter on group membership (done) on a 2k8 64bit DC (2003 and 2013 DCs are in the mix and the domain is still on 2k3 compat mode). I've downloaded and installed the Office 2013 Administrative Templates and read up on how to add administrative templates to GPO. Based on that I created a folder \PolicyDefinitions\EN-US under \\<name of DC i'm working on>\sysvol\<domain name> and copied the excel15.admx and excel15.opal files to it. When editing the aforementioned GPO the settings do not show under \user config\admin templates. Right-clicked admin templates and Add/Remove Templates. The file browse is, of course, locked down to Policy Templates. The aforementioned files do not show up to be added when browsing to their location (either the EN-US noted above or the folder I created after downloading and installing the OCT). Re-read the below articles and it's just not clear what I'm missing. https://technet.microsoft.com/en-us/library/cc178992(v=office.15).aspx https://technet.microsoft.com/en-us/library/cc179081 https://technet.microsoft.com/en-us/library/cc754948(WS.10).aspx https://technet.microsoft.com/en-us/library/02633470-396c-4e34-971a-0c5b090dc4fd Any ideas? -- Charlie Sullivan Sr. Windows Systems Administrator Boston College 197 Foster St. Room 367 Brighton, MA 02135 617-552-4318
