Targeting is a term used with GPP (group policy preferences) and it isn't really the same for a true GPO. GPOs can only be filtered on what you've mentioned, by location (ou), WMI queries, and/or SID-based objects like users, computers, and groups.
I believe an LDAP query may be one of the targeting options within a GPP, but I'm not onsite (nor VPN) to check. Also, think of adm/admx files as the code to tell you how to see any specific policy setting (it exposes the value to be set and what can be chosen). The adm/adml files are the appropriate language information for you to read it. Once those values are set through the interface, the GPO itself will hold the values in another format until you change it. In other words, all of your previously set items are there, you just can't see them without the correct templates in the location you are reading templates from. -Bonnie ________________________________ From: [email protected] <[email protected]> on behalf of Daniel Chenault <[email protected]> Sent: Tuesday, January 27, 2015 2:58 PM To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Alrighty then. Thank you. Last question: I've applied this GPO to a specific OU and with to further restrict it to what groups those users in that OU belong to. I have an LDAP query that works. One article I read cited Targeting but I'm not finding that. ________________________________ From: [email protected] To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Date: Tue, 27 Jan 2015 22:08:42 +0000 Once the Central Store exists, it will always be used by GPMC. But yes, existing GPOs will continue to work. From: [email protected] [mailto:[email protected]] On Behalf Of Daniel Chenault Sent: Tuesday, January 27, 2015 5:05 PM To: [email protected] Subject: RE: [NTSysADM] Adding admin templates to GPO Now I'm concerned. Now when I open GPMC and go down to templates ONLY the Excel template is showing. Should I copy the contents of \Policies to the Central Store on the PDCe? NB: they all predate my time here. Do they still work? Gotta know before folks log in tomorrow morning (or tonite if VPN'ed). I _think_ existing GPOs will continue to work, that this change just means Central Store is used from this point forward, but would appreciate someone better versed in this to say so. Or not. ________________________________ From: [email protected]<mailto:[email protected]> To: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] Adding admin templates to GPO Date: Tue, 27 Jan 2015 14:00:07 -0800 All I can say is that in the mass of text that I somehow missed that. There was a point where I was reading in one of those articles and the text was confusing as to what was expected. Back when I worked there I used to reject articles (as I did peer review) that did not give a clear "step 1. Blah Step 2. Blah" where appropriate. ________________________________ From: [email protected]<mailto:[email protected]> To: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] Adding admin templates to GPO Date: Tue, 27 Jan 2015 21:51:59 +0000 It was right there in the MS KB you referenced earlier: To create a Central Store for .admx and .adml files, create a folder that is named PolicyDefinitions in the following location: \\FQDN\SYSVOL\FQDN\policies Thanks Webster From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Daniel Chenault Sent: Tuesday, January 27, 2015 3:47 PM To: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] Adding admin templates to GPO BLAM... moved the \PolicyDefinitions under Policies and it worked. Now... why can't MS write articles that are clear like that? I was following the last one to the letter. Problem solved. Thanks all for your help. ________________________________ Date: Tue, 27 Jan 2015 16:27:13 -0500 Subject: Re: [NTSysADM] Adding admin templates to GPO From: [email protected]<mailto:[email protected]> To: [email protected]<mailto:[email protected]> I don't have any .opal files in mine, only .admx and .adml, and I created the Policy Definitions folder under Policies, not directly under <domainname>. You shouldn't have to try and manually add them to the clients, they should automatically be used (and enforced). On Tue, Jan 27, 2015 at 12:36 PM, Daniel Chenault <[email protected]<mailto:[email protected]>> wrote: I need to create a GPO (done) to manage Excel 2013 settings using an LDAP filter on group membership (done) on a 2k8 64bit DC (2003 and 2013 DCs are in the mix and the domain is still on 2k3 compat mode). I've downloaded and installed the Office 2013 Administrative Templates and read up on how to add administrative templates to GPO. Based on that I created a folder \PolicyDefinitions\EN-US under \\<name of DC i'm working on>\sysvol\<domain name> and copied the excel15.admx and excel15.opal files to it. When editing the aforementioned GPO the settings do not show under \user config\admin templates. Right-clicked admin templates and Add/Remove Templates. The file browse is, of course, locked down to Policy Templates. The aforementioned files do not show up to be added when browsing to their location (either the EN-US noted above or the folder I created after downloading and installing the OCT). Re-read the below articles and it's just not clear what I'm missing. https://technet.microsoft.com/en-us/library/cc178992(v=office.15).aspx<https://technet.microsoft.com/en-us/library/cc178992%28v=office.15%29.aspx> https://technet.microsoft.com/en-us/library/cc179081 https://technet.microsoft.com/en-us/library/cc754948(WS.10).aspx<https://technet.microsoft.com/en-us/library/cc754948%28WS.10%29.aspx> https://technet.microsoft.com/en-us/library/02633470-396c-4e34-971a-0c5b090dc4fd Any ideas? -- Charlie Sullivan Sr. Windows Systems Administrator Boston College 197 Foster St. Room 367 Brighton, MA 02135 617-552-4318
